Senior Cloud Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead proactive, hypothesis-driven threat hunting across AWS, Azure, GCP, and OCI environments.

• Leverage threat intelligence and the MITRE ATT&CK framework to uncover adversary activities overlooked by automated tools.

• Examine cloud-native telemetry and SIEM data to probe into suspicious activities.

• Manage and enhance Qualys and Tenable scanning across more than 70 cloud customer tenants.

• Oversee scan policies, deployment of agents and connectors, asset coverage, and credentialed scanning.

• Evaluate vulnerability and configuration findings, eliminate false positives, and prioritize remediation efforts.

• Direct remediation efforts by collaborating with engineering and patching teams to apply patches, harden environments, or implement compensating controls.

• Confirm remediation closure through rescanning processes.

• Detect and rectify cloud misconfigurations, excessive IAM permissions, exposed services, and deviations from STIG/CIS benchmarks.

• Create and refine detection rules, queries, and automated hunt playbooks.

• Assist in incident response by providing scoping, containment recommendations, and root cause analysis.

• Generate hunt reports, track remediation efforts, and provide inputs for the Plan of Actions and Milestones (POA&M).

• Present findings and associated risks to customers, ISSOs/ISSMs, and leadership.

• Mentor junior security engineers.

⛳️ Requirements

• A Bachelor's degree with 12 years of experience, a Master's degree with 10 years, an Associate's degree with 14 years, or a High School diploma/equivalent with 16 years of experience.

• Must be a U.S. Citizen.

• Capability to obtain and maintain a DHS Public Trust.

• Over 8 years of experience in information security, including at least 5 years in cloud security engineering.

• Hands-on security expertise in a minimum of three among AWS, Azure, GCP, and OCI.

• Proficient in Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus).

• Experience in conducting threat hunts and investigations utilizing the MITRE ATT&CK framework.

• Skilled in writing queries and analyzing logs within a SIEM or log platform such as Splunk, Microsoft Sentinel, or Elastic.

• Familiarity with remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services.

• Comprehensive understanding of cloud IAM, network security, encryption, and logging architecture.

• Experience in scripting or automation using Python, PowerShell, or Bash.

• Knowledge of Terraform or Ansible.

• Working familiarity with STIGs, CIS Benchmarks, and NIST 800-53 controls.

• Excellent written and verbal communication skills.

• An investigative mindset, strong analytical abilities, and meticulous attention to detail.

• Relevant certifications such as CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer are preferred.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee assistance program (EAP).

• Parental leave.

• 401(k).

• Paid time off (PTO) for vacation.

• Company paid holidays.

• Potential eligibility for overtime.

• Potential eligibility for shift differential.

• Potential eligibility for a discretionary bonus.