Cloud Security Engineer

Cybersecurity Jobs; New Jersey; Presencial; USD 69.000 - 76.000; Tempo integral

Benefícios oferecidos por esta vaga

Medical plan

Dental plan

Vision plan

Health Savings Account

401(k) with company match

Weekly pay

Resumo da vaga

Cybersecurity Jobs is seeking a hands-on Security Engineer for our Warren, NJ onsite team. You will own the full lifecycle of security findings, drive remediation, and implement guardrails across Azure and cloud identity.

The role emphasizes reducing recurring issues and improving cloud posture using policy-as-code and automation. You'll work with Microsoft Defender for Cloud, Azure Policy, and Terraform, ensuring strong authentication flows and drift detection.

Qualificações

• 9+ years in cloud security or security engineering with Azure experience.
• Hands-on expertise with Microsoft Entra ID (app registrations, permissions, service principals, least-privilege).
• Solid knowledge of modern authentication: OIDC, OAuth 2.0 with PKCE, JWT, and mTLS.
• Experience using Terraform and Azure Policy for policy-as-code and guardrails.
• Proven track record closing security findings using Defender for Cloud and cloud posture management.

Responsabilidades

• Own the full lifecycle of security findings: triage, remediation, verification, closure.
• Investigate recurring issues and implement systemic fixes using policy-as-code and guardrails.
• Track remediation SLAs and report risk reduction and cloud posture trends.
• Secure and govern modern authentication flows (OIDC, OAuth 2.0 with PKCE, JWT, mTLS).
• Build guardrails with Azure Policy and Terraform, including drift detection and remediation.

Conhecimentos

Azure security

Microsoft Entra ID

OIDC

OAuth 2.0 / PKCE

JWT validation

mTLS

Terraform

Azure Policy

Defender for Cloud

Ferramentas

Terraform

Azure Policy

Microsoft Defender for Cloud

OIDC

OAuth 2.0

PKCE

JWT

mTLS

Azure

Microsoft Entra ID

Descrição da vaga

Work onsite in Warren, NJ as part of the Security Engineering organization, helping strengthen cloud security through hands-on remediation and long-term hardening. This role focuses on closing recurring findings, tightening modern authentication and identity controls, and building guardrails that improve cloud posture over time.

You will support security findings and recommendations across the environment, including what comes from the security team and tools such as Microsoft Defender for Cloud. Your work will be measurable, with an emphasis on reducing risk, tracking remediation SLAs, and preventing the same issues from returning quarter after quarter.

What you’ll do

• Own the full lifecycle of security findings and recommendations: triage, remediation, verification, and closure, regardless of origin (security team, Microsoft Defender for Cloud, or other tooling).
• Investigate root causes of recurring issues and implement systemic fixes, using approaches such as policy-as-code, automated guardrails, and secure baselines.
• Track remediation SLAs and report on risk reduction and cloud posture trends over time to ensure security outcomes keep improving.
• Secure and govern modern authentication flows across the estate, including OIDC, OAuth 2.0 with PKCE, JWT validation and handling, and mTLS.
• Build and enforce cloud security guardrails using Azure Policy and Terraform, including detection and remediation of configuration drift.

What you bring

• 9+ years in cloud security or security engineering with deep, hands-on Azure experience.
• Strong, hands-on Microsoft Entra ID expertise, including app registrations, Enterprise Application permissions, consent governance, service principals, managed identities, and least-privilege scoping.
• Solid knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS.
• Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails.
• Experience with Microsoft Defender for Cloud and cloud security posture management, including a demonstrable track record of permanently closing security findings.

Tools and technologies

Azure, Microsoft Entra ID, Microsoft Defender for Cloud, OIDC, OAuth 2.0, PKCE, JWT, mTLS, Azure Policy, Terraform, policy-as-code, service principals, managed identities

Compensation

$50 to $55 per hour (weekly pay). This position is onsite in Warren, NJ.

Benefits

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

Upon completion of the waiting period, consultants are eligible for the benefits listed above.

What’s in it for you

• Enjoy a hands-on engineering role where remediation work directly improves security posture and reduces recurring findings.
• Turn security recommendations into durable fixes enforced by design, not one-off patches.
• Build systemic guardrails across cloud governance, identity, and privileged access to reduce backlog and improve outcomes over time.
• Contribute to security governance standards, including control definitions, exception handling, and audit evidence.
• Apply security controls to AI workloads and AI agents, including identity and tool permission scoping and emerging AI security best practices.