Cybersecurity Engineer, Cloud

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement and uphold security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services.

• Set up and evaluate security policies, infrastructure-as-code controls, deployment automation, and integrations.

• Analyze technical findings, troubleshoot control failures, and suggest configuration modifications to mitigate risk.

• Administer assigned cloud security posture management and workload protection capabilities.

• Ensure platform health and configuration, adjust controls, document exceptions, and identify gaps in cloud coverage.

• Integrate cloud security telemetry with Security Operations and the managed security service provider.

• Provide support for escalated investigations that require cloud expertise.

• Coordinate exposure prioritization and tracking in collaboration with Vulnerability Management and cloud platform owners.

• Implement and validate technical controls that support CMMC and relevant NIST requirements.

• Assist with Microsoft 365 GCC High and CUI workloads.

• Translate DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, and other requirements into cloud configurations.

• Conduct technical risk assessments and control testing; maintain implementation records, evidence, exceptions, and remediation status.

• Implement and manage security controls for approved AI and machine-learning services, copilots, generative AI applications, RAG, agents, and tool integrations.

• Configure identity, access, data-source permissions, secret handling, execution boundaries, sandboxing, tool restrictions, approvals, network egress, and logging safeguards.

• Test controls against prompt injection, sensitive-data exposure, unsafe tool execution, over-privileged agents, and other AI security risks.

• Evaluate AI service configurations and platform features for security, privacy, data residency, government-cloud availability, and CUI handling.

• Automate AI security configurations and validation checks using policy, scripting, infrastructure as code, and deployment pipelines.

• Integrate AI activity and security telemetry with enterprise monitoring and support investigations.

• Collaborate with Identity, Network Security, Data Security, Detection and Incident Response, IT, program sites, and application teams.

• Maintain configuration standards, implementation guides, diagrams, operating procedures, and support documentation.

• Participate in second-level SOC activities and respond to critical incidents escalated by an MSSP.

• Provide infrequent off-hours support as needed.

• Perform additional duties as assigned.

⛳️ Requirements

• U.S. citizenship is mandatory for this position.

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience.

• Five years of relevant experience, including three or more years in cloud, security, systems, or infrastructure engineering.

• Hands-on experience with Microsoft cloud or AWS security capabilities.

• Ability to support Microsoft 365, Azure, AWS, and hybrid services as necessary.

• Experience in implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code.

• Working knowledge of cloud identity, network security, data protection, logging, posture management, and workload protection concepts.

• Familiarity with generative AI and agentic-system security risks.

• Ability to support technical risk assessments, control testing, remediation documentation, and audit evidence collection.

• Proficient in troubleshooting technical issues, documenting work clearly, managing priorities, and collaborating with both technical and non-technical partners.

• Experience with cloud security posture management, workload protection, or cloud-native application protection platforms.

• Practical experience with Microsoft 365 GCC High or a similar government cloud environment.

• Direct experience in supporting government, defense-industrial-base, CUI, or other regulated cloud environments.

• Working knowledge of CMMC, NIST SP 800-171, and NIST SP 800-172 concepts.

• Familiarity with DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, or similar requirements.

• Hands-on experience securing cloud AI or machine-learning services, enterprise copilots, generative AI applications, retrieval-augmented generation, agents, or automated tool integrations.

• A relevant security or cloud certification is preferred, such as Security+, an Azure or AWS security certification, CCSP, or equivalent training.

🏝️ Benefits

• Health, dental, and vision insurance.

• Paid time off and holidays.

• Retirement benefits (including 401(k) matching).

• Educational reimbursement.

• Parental leave.

• Employee stock purchase plan.

• Tax-saving options.

• Disability and life insurance.

• Pet insurance.