Cloud Security Engineer

UNAVAILABLE; McLean (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

UNAVAILABLE is seeking a Cloud Security Engineer to advance secure cloud architectures across migration, deployment, and optimization. You will work with DevSecOps practices, implement zero-trust concepts, IAM policies, and data protection, collaborating with developers and operations.

The role emphasizes risk assessment, threat modeling, and compliance with standards, plus automation of vulnerability and patch management.

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• Bachelor's degree in IT or related field with IT experience.
• 5+ years of total experience.
• 3+ years designing, developing, and implementing cloud solutions.
• 3+ years with AWS, Azure, or GCP.
• 3+ years with Git SCM providers (GitHub, GitLab, Bitbucket).
• 3+ years in an Agile development environment.
• 3+ years implementing infrastructure as code and orchestration.
• 3+ years monitoring, risk assessment, threat modeling and security testing in cloud environments.
• 3+ years documenting POAMs, SSPs, and A&A support documentation.
• Must have and maintain an active cloud or security certification.

Responsibilities

• Identify and implement secure cloud-based solutions with zero-trust architecture.
• Understand stakeholder needs and balance security with usability.
• Monitor cloud environments with native or SIEM solutions and investigate incidents.
• Review infrastructure as code and assess risk.
• Ensure systems are protected against cybersecurity threats via risk assessment and threat modeling.
• Perform root cause analysis and develop fixes.
• Automate vulnerability management and patching processes.
• Collaborate with developers to ensure security processes are followed.
• Support enterprise cloud security through IaC and large-scale deployments.
• Ensure data protection in transit and at rest and document architecture.
• Conduct gap analyses and produce option recommendations.
• Analyze vulnerabilities and deployment issues and resolve them.
• Mentor junior team members and promote continuous improvement.
• Present status updates and provide cross-training to the team.

Skills

Security clearance eligibility

Cloud security

DevSecOps

Infrastructure as Code

SIEM monitoring

Risk assessment

Threat modeling

Documentation skills

Mentoring

Communication skills

Education

Bachelor's degree in IT or related field

Non-IT degree with 2+ IT years

Tools

GitHub

GitLab

Bitbucket

Concourse

Bash

PowerShell

Python

Groovy

Ruby

Terraform

Chef

CloudFormation

Ansible

Job description

Overview

As a Cloud Security Engineer, you will work within our growing DevSecOps practice delivering features to support developing, testing, and monitoring secure cloud architectures for cloud migration, cloud optimization and cloud deployment. We are looking for candidates with experience with cloud platform services, cybersecurity and DevOps practices such as infrastructure as code and confirmation management automation.

Responsibilities

• Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, identity and access management policy, and data privacy.
• Understand the needs of stakeholders and optimizesolutions that marry security with usability.
• Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents where appropriate.
• Examine infrastructure as code written by others and analyzing risk.
• Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPPA, FISMA, etc.).
• Identify technical problems, perform root cause analysis, and develop updates and ‘fixes’.
• Automate security processes such as vulnerability management and patch management.
• Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended.
• Supportenterprise cloud security throughinfrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing.
• Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit.
• Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations.
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor more junior team members.
• Engineer and implement solutions and provide recommendations for continuous improvement for the services provided.
• Present regular status updates and provide cross training to other team members.

Qualifications

Required:

• Ability to obtain a U.S. government Security Clearance
• Bachelor's degree in an IT field OR Bachelor's degree in a non-IT field and 2 years related IT experience
• 5+ years of total experience
• 3 years of experience architecting, designing, developing, and implementing cloud solutions
• 3 years of experience with one or more clouds (i.e. AWS, Azure, or GCP)
• 3 years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket
• 3 years of experience with systems development in an Agile environment
• 3 years of experience implementing infrastructure as code and orchestration
• 3 years of experience providing conducting monitoring, risk assessment, threat modeling and security testing in cloud environments
• 3 years of experience documenting POAMs, SSPs, and A&A support documentation
• Must have and maintain an active cloud or security related certification

Preferred:

• Certifications:
  • AWS Certified Security Specialty
  • AWS Certified Solution Solution Architect Associate
  • Microsoft Certified Azure Administrator Associate
  • Certified Information Systems Security Professional (CISSP)
• Excellent written and verbal communication skills
• Excellent interpersonal and collaborative skills
• Experience with documenting an as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools, including Pivotal, Chef, Terraform, CloudFormation, or Ansible