Cloud Security Engineer

ECS Corporate Services; Arlington (VA); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Everforth ECS in Arlington, VA is seeking a Cloud Security Engineer to join our hybrid office/remote team. You will own vulnerability management end-to-end across cloud, on-prem, and applications, drive remediation, and present findings to technical and executive audiences.

You have hands-on experience with AWS, Azure, and GCP, perform risk-based analysis, architecture reviews, support RMF/ATO processes, and automate tasks with Python/Bash/PowerShell.

Qualifications

• Bachelor's degree in a related field is required.
• 7 years IT experience with at least 3 years in cloud security/vulnerability management.
• Certifications: CISSP, CISA, CISM or relevant cloud provider certs.
• Hands-on scripting in Python, Bash or PowerShell.
• Familiarity with SOC 2, CIS, NIST, ISO 27001.
• Experience generating AI prompts for GPT-based outputs.

Responsibilities

• Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments.
• Conduct authenticated and unauthenticated scans of web apps, APIs, servers, databases, and network devices.
• Perform risk-based analysis of findings including false positives and remediation verification.
• Partner with platform, cloud, and application teams to drive remediation.
• Implement and tune CSPM tools and scanners across AWS, Azure, and GCP.
• Perform security architecture reviews covering IAM, encryption, logging, and network controls.
• Support static, dynamic, container, and dependency scanning and guide dev teams.
• Automate validation and reporting with scripting.

Skills

Vulnerability management

Risk-based analysis

Security architecture reviews

Executive reporting

Automation (Python/Bash/PowerShell/Ter

Cloud security (AWS/Azure/GCP)

Threat triage

Education

Bachelor's degree in a related field

Tools

AWS

Azure

GCP

CSPM tools

Vulnerability scanners

DISA STIGs

Job description

Everforth ECS is seeking a Cloud Security Engineer to work in our Arlington, VA office/remote . We're looking for a security engineer who understands vulnerability management as an end-to-end discipline. Not just scanning, but contextualizing findings, eliminating false positives, and driving remediation outcomes across engineering, development and platform teams. You have hands-on experience operating security tooling across AWS and Azure, you can perform architecture reviews and deliver actionable guidance, and you're comfortable supporting ATO processes and continuous monitoring under RMF. You work well without heavy direction, you know how to prioritize risk in complex environments, and you can translate technical findings into clear reporting for both technical and executive audiences. You are comfortable giving technical presentations to leadership, that results in understanding and acceptance. You are familiar with Artificial Intelligence GPT prompting.

What You'll Do

• Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments
• Conduct authenticated and unauthenticated scans of web applications, APIs, servers, databases, and network devices
• Perform risk-based analysis of findings including false positive validation, asset context evaluation, and remediation verification
• Partner with platform, cloud, and application teams to drive sustainable remediation outcomes
• Implement, operate , and tune CSPM tools, vulnerability scanners, and application security tooling across AWS, Azure, and GCP
• Perform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controls
• Support static, dynamic, container, and dependency scanning and help dev teams understand and fix what’s found
• Perform secure configuration reviews against DISA STIGs and other security baselines
• Automate vulnerability validation, remediation tracking, and control validation using Python, Bash, PowerShell, and Terraform
• Manage certificate lifecycle including inventory, renewal tracking, and deployment coordination
• Support ATO activities, POA&M management, and RMF Step 6 continuous monitoring
• Build and maintain runbooks, technical reports, executive dashboards, and risk summaries
• Assist during security audits and incident response investigations involving vulnerable systems
• Pro ty pe and pro vide traini ng on new to ols and solutions .

Salary: $140,000 - $170,000

General Description of Benefits

• Must have US citizenship.
• Ability to pass a Public Trust investigation.
• Bachelor's degree in a related field.
• 7 years of overall IT experience, with at least 3 years focused specifically on cloud security or vulnerability management
• CISSP, CISA, CISM, or relevant cloud provider certifications required
• Hands-on scripting experience in Python, Bash, or PowerShell
• Familiarity with compliance frameworks including SOC 2, CIS, NIST, or ISO 27001
• Understanding of CVEs, CWEs, CVSS scoring, and how to apply them in practice
• E xperie nce gen erating AI GPT pro mpts the pro duc e the e xpecte d outp ut