Cloud Security Engineer

Cyberjobs; United States; Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Tyto Athene seeks an experienced Cloud Security Engineer to protect a major Federal client’s cloud footprint. You’ll lead cloud threat hunting, incident response, and PKI-enabled monitoring in a large enterprise SOC.

Expect hybrid work with possible DC site time and focus on AWS, with Azure and Google Cloud expertise as a plus. You’ll develop cloud incident response playbooks, tune SIEM integrations, and drive KPI-driven security improvements while collaborating across teams to ensure full

Qualifications

• Eight years of cyber security experience, with six in cloud security engineering
• Proven cloud threat hunting in SaaS/PaaS/IaaS environments
• Experience leading cloud incident response efforts
• Hands-on expertise across AWS, Azure and Google Cloud
• Bachelor’s degree or equivalent experience
• Strong SOC teamwork and clear communication

Responsibilities

• Perform cloud threat hunting and incident response activities
• Review cloud logs and develop context-rich alerts
• Lead cloud incident response during events
• Develop cloud incident response playbooks
• Collaborate with stakeholders for cloud workload visibility
• Onboard cloud logs to SIEM and tune monitoring use cases
• Optimize security tools to maximize blocking with low FP
• Contribute KPIs to monitor function health

Skills

Cloud threat hunting

Incident response leadership

AWS experience

Azure experience

GCP experience

Security monitoring

Threat detection tuning

Cloud SOC operations

Verbal/written communication

Education

Bachelor's degree

Alternate relevant experience

Tools

AWS

Azure

Google Cloud

SIEM

EDR

Job description

Description

Tyto Athene is seeking an enthusiastic Cloud Security Engineer to help our largest Federal client monitor and secure their rapidly expanding cloud footprint against would-be attackers. The successful candidate will have a passion for and experience with being the foremost Cloud Security expert in a large, enterprise SOC environment and augment the team’s knowledge and skills regarding AWS to develop alerting and response procedures for cloud events and perform cloud hunting, monitoring, and incident response.

Responsibilities:

• Perform cloud hunting and identify embedded threats effectively and efficiently
• Review and analyze cloud logs to bring relevance and context to the data
• Lead cloud incident response activities as they occur
• Develop a full set of cloud incident response playbooks
• Work with stakeholders to ensure full visibility into workloads running in the cloud
• Ensure all cloud logs are onboarded to the SIEM tool and the correct events are logged
• Develop and implement a full set of monitoring use cases to enable DOJ security tools to immediately and automatically detect cloud threats
• Continuously tune security tools for optimization, i.e., maximum blocking with minimal false positives
• Devise and implement additional KPIs and metrics that help DOJ monitor the overall health of this function
• Ensure and enable DOJ’s participation in threat information-sharing initiatives across the USG
• Assist the engineering team with the deployment, configuration, and maintenance of cloud-based SOC tools, technologies, applications, and solutions
• Perform research and lead proof of concept efforts to determine where additional technologies may be necessary

Qualifications

Required:

• Able to work normal business hours (core) and occasional/limited on-call hours as requested by the client and/or as required by operational demands (e.g., during major incidents)
• Willingness to work at the client site in Washington DC at least part of the time is required (hybrid/telework)
• Eight (8) years of cyber security experience, with at least six (6) of those years working as a Cloud Security Engineer in an enterprise SOC environment
• Demonstrated expertise in performing cyber threat hunting activities in cloud environments (e.g., SaaS, PaaS, IaaS, including O365, SIEM, EDR, and other cloud-based applications) is critically important
• Demonstrated experience leading incident response activities when cloud-based tools and systems are involved
• Experience across all major cloud providers (AWS, Azure, Google), with a focus on AWS
• Bachelor’s degree required OR additional relevant experience
• Ability to work as an integral part of a high-performing SOC team is required
• Effective verbal and written communication skills that include the ability to describe highly technical concepts in non-technical terms
• Understanding of recent cybersecurity policies and mandates such as EO 14028, M-21-31, NSM-8, and their impact on SOC activities

Desired:

• Advance level Cloud Security certifications are strongly preferred (e.., AWS Security Specialty certification)
• CISSP, GCIH, and similar certifications are a plus

Clearance:

• Active Top Secret Clearance with SCI Eligibility is required

About Tyto Athene

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $140,000-$150,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains- Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT-empowering our clients with cutting-temper solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.