Senior Cloud Security Engineer – AWS, GCP

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute systems administration and maintenance tasks including patch management, vulnerability assessment, compliance monitoring and remediation, as well as backups and recovery for cloud workloads.

• Provide support for AWS and GCP environments, encompassing Windows and Linux virtual machines, container workloads, and various cloud services.

• Set up, update, and maintain security tools for endpoint protection, log aggregation, vulnerability analysis, and compliance monitoring.

• Diagnose issues across network, compute, application, and identity layers by examining logs, gathering data, and analyzing system behaviors.

• Apply hardening and compliance controls in line with CIS Benchmarks, DISA STIGs, and FedRAMP standards.

• Address vulnerabilities identified by tools such as Tenable, Trivy, OpenSCAP, Anchore, Twistlock, and others.

• Offer quality assurance feedback during system deployments to guarantee architecture adheres to compliance and operational standards.

• Work alongside Security Analysts to maintain uninterrupted delivery of security services to clients.

• Develop and upkeep network diagrams, data flow diagrams, SOPs, and security tool configuration documentation.

• Assist with client communications, deliverables, and troubleshooting efforts.

• Mentor junior engineers as needed.

• Serve as primary or backup engineer in a structured 24/7 on-call rotation after hours.

• Address after-hours security alerts, infrastructure incidents, outages, and ConMon events.

• Conduct initial triage, containment, and stabilization following established runbooks.

• Investigate and respond to alerts effectively.

• Elevate complex issues to senior engineers, architects, or compliance teams when necessary.

• Document incidents, actions taken, and suggest improvements.

• Contribute to enhancements in automation and runbooks.

⛳️ Requirements

• A minimum of six (6) years of experience in IT engineering and/or cybersecurity, including at least three (3) years in a dedicated cloud security engineering or equivalent role.

• Practical experience with both AWS and Google Cloud Platform (GCP).

• Capability to diagnose and resolve issues across Linux and Windows systems, network infrastructure, and cloud services.

• General experience in systems administration and vulnerability management, covering system patching and hardening, identity and access management (IAM), and related responsibilities.

• Experience in a DevSecOps environment, embedding security practices into cloud and infrastructure workflows.

• Familiarity with ITSM ticketing systems like Gitlab (preferred), Jira, ServiceNow, etc.

• Ability to work independently during business hours and on-call rotations.

• Excellent written and verbal communication skills for customer engagement and incident documentation.

• Hands-on experience with one or more of the following tools: Splunk Enterprise; Tenable Security Center/Nessus; Invicti/Acunetix; Appgate; Okta; GitLab; Palo Alto Networks Firewalls; TrendMicro Deep Security; Trivy; Anchore; Terraform; CloudFormation; Ansible.

• A Bachelor's Degree in Computer Science or another related field (preferred).

• Experience supporting federal/government-facing clients or consulting engagements, ensuring compliance with operational requirements.

• Familiarity with FedRAMP, FISMA, or NIST 800-53 compliance frameworks.

• Previous experience in on-call, SRE, SOC, or incident response roles.

• Relevant AWS or Google Cloud Platform certifications (preferred).

• Security+ or other pertinent industry security certifications (preferred).

• Experience with infrastructure-as-code or automation tools.

• Experience with Kubernetes is highly preferred.

• Must be a US Citizen capable of obtaining a security clearance.

🏝️ Benefits

• Health/Dental/Vision coverage.

• 401(k) matching.

• Paid Time Off.

• Short-Term/Long-Term Disability and Life Insurance.

• Referral Bonuses.

• Professional development reimbursement.

• Parental leave.