Cloud Security Engineer

Jobtailor; Charlotte (NC); On-site; USD 65,000 - 90,000; Full time

Job summary

Jobtailor is seeking a cybersecurity engineer focused on secure Google Cloud architecture, IAM, logging/monitoring, and encryption. You will collaborate with SecOps, Cloud Platform teams, and engineering to implement guardrails, onboard log sources, and maintain auditable controls.

The role emphasizes documentation, runbooks, and repeatable processes for log onboarding and SIEM content, with a strong bias toward least-privilege configurations and baseline security practices.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field (or equivalent practical experience).
• 0–3 years of experience in cybersecurity engineering, cloud engineering, security operations, or related internships.
• Exposure to at least one cloud platform (Google Cloud preferred) with core security concepts (IAM, networking, logging/monitoring, encryption).
• Foundational understanding of cloud identity and access controls (roles/permissions, service accounts, least privilege).
• Working knowledge of cloud logging/monitoring and why audit logs matter for security operations.
• Comfortable writing clear documentation and collaborating cross-functionally.

Responsibilities

• Support secure Google Cloud architecture patterns across IAM, networks, logging, and data protection.
• Partner with Google Cloud team to implement guardrails and engineering improvements.
• Assist SecOps with SIEM operations including onboarding log sources and investigations.
• Produce documentation, diagrams, and runbooks for repeatable controls.
• Assist with secure configurations across Google Cloud environments and least privilege access.
• Support cloud service security reviews and baseline controls like encryption and key management.
• Contribute to IaC security hygiene and cloud configuration repeatability.
• Operationalize cloud security monitoring for investigations with high-quality telemetry.
• Coordinate SIEM data onboarding, ingestion validation, and normalization readiness.
• Support detection content lifecycle and alert quality improvement.
• Develop repeatable processes for log onboarding, SIEM content management, and dashboards.

Skills

Cloud security concepts

SIEM concepts

Logging/monitoring

Least privilege

Documentation

Cross-functional collaboration

Python scripting

Education

Bachelor's degree or equivalent in Cybersecurity/CS/IS/Engineering

Job description

Responsibilities

• Supporting secure Google Cloud architecture patterns across identity, network, logging/monitoring, and data protection domains (IAM, policies, encryption, boundary controls).
• Partnering with the Google Cloud team to implement guardrails and engineering improvements aligned to best practices and compliance needs.
• Assisting with SecOps SIEM operations including onboarding log sources, supporting detections, and helping improve investigation workflows.
• Producing clear documentation, diagrams, and runbooks that make controls repeatable and auditable.
• Assist in implementing and maintaining secure configurations across Google Cloud environments, focusing on least privilege access, resource hierarchy/policies, and workload protection patterns.
• Support security design reviews for new/changed cloud services and applications (e.g., networking changes, service accounts, logging requirements).
• Help deploy and validate baseline security controls such as encryption, key management practices, and secure network boundary protections (e.g., segmentation and perimeter controls where applicable).
• Contribute to Infrastructure-as-Code (IaC) security hygiene by reviewing and improving cloud configurations for repeatability and reduced drift (tooling used by the platform team).
• Help operationalize cloud security monitoring by ensuring audit and security telemetry is available and usable for investigations (visibility, alert context, and log quality).
• Support vulnerability and configuration findings triage by partnering with engineering teams to validate issues and track remediation progress.
• Assist with SIEM data onboarding efforts: coordinate with system owners, validate ingestion, and support normalization/correlation readiness.
• Support detection content lifecycle activities such as documentation updates, basic tuning support, and reporting on alert quality (false positives/noise reduction).
• Help build repeatable processes for log source onboarding and SIEM content management (runbooks, checklists, dashboards, and metrics).
• Partner with SecOps stakeholders to improve investigation workflows and ensure SIEM capabilities are aligned to operational needs (search, context, and investigation views).
• Maintain security documentation (control narratives, diagrams, standards) and contribute to “secure-by-default” enablement content for engineering teams.
• Coordinate with cloud engineering, Security Architecture, and SecOps teams to plan and execute small-to-medium security initiatives.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field (or equivalent practical experience).
• 0–3 years of experience in cybersecurity engineering, cloud engineering, security operations, or related technical internships/rotations.
• Exposure to at least one cloud platform (Google Cloud preferred) with understanding of core security concepts (IAM, networking, logging/monitoring, encryption).
• Basic familiarity with SIEM concepts (log sources, parsing/normalization, alerting, investigation workflows).
• Foundational understanding of cloud identity and access controls (roles/permissions, service accounts, least privilege concepts).
• Working knowledge of cloud logging/monitoring and why audit logs matter for security operations.
• Familiarity with network security basics (segmentation, boundary protection concepts, secure communications).
• Comfortable writing clear documentation and collaborating cross-functionally with engineering and operations teams.
• Scripting/automation mindset (Python or similar) is a plus.
• Certifications (preferred / growth-oriented): Google Cloud: Associate Cloud Engineer (strongly preferred as junior baseline); Professional Cloud Security Engineer (stretch as experience grows); Security fundamentals: CompTIA Security+ (or equivalent); Cloud security fundamentals: CCSK or CCSP (as role matures); SIEM/Detection: Training aligned to Google SecOps / Chronicle SIEM concepts (SIEM/SOAR learning path).