Cloud Security Engineer

ecsfederal; Washington (District of Columbia); Hybrid; USD 120,000 - 130,000; Full time

Job summary

Everforth ECS seeks a Cloud Security Engineer to join our Washington, DC area team, with on-site office and remote work options. You will be hands-on in security operations, protecting cloud and web assets while hardening Linux infrastructure.

The role requires strong experience in cloud platforms (AWS/Azure/GCP), threat monitoring, incident response, and collaboration across security, networking, and IT teams. A practical mindset and ability to implement effective controls are essential.

Qualifications

• Proven experience planning, implementing, and monitoring security measures for cloud platforms such as AWS, Azure, or GCP.
• Ability to analyze cloud services, APIs, and log payloads for risk and compliance.
• Experience developing and maintaining standard operating procedures for cloud-based security event handling.
• Familiarity with cloud-native security tooling including CASBs, CSPM, and cloud workload protection platforms.
• Experience with cloud architectures including SaaS and PaaS, and common platforms like Google Workspace, Microsoft 365, and AWS.
• Understanding of web app security concepts including OWASP, API security, and WAF management.
• Experience with cloud IAM frameworks, RBAC, and Zero Trust in cloud environments.
• Ability to create custom detection mechanisms that correlate log sources across cloud environments.

Responsibilities

• Plan, implement, and monitor security measures for cloud platforms such as AWS, Azure, or GCP.
• Analyze cloud services, APIs, and log payloads to ensure compliance with security standards.
• Develop and maintain standard operating procedures for cloud-based security event handling.
• Familiarity with CASBs, CSPM, and cloud workload protection platforms.
• Understand cloud architectures including SaaS/PaaS and tools like Google Workspace and AWS.
• Apply web security concepts including OWASP, API security, and WAF management.
• Implement RBAC and Zero Trust across cloud environments.
• Create detection mechanisms that correlate cloud log sources to surface intrusions.

Skills

Cloud security

Linux server administration

Threat monitoring

Incident response

Security operations

Documentation

Team collaboration

Tools

AWS

Azure

GCP

CASB

CSPM

WAF

Zero Trust

Job description

Everforth ECS is seeking a Cloud Security Engineerto work in our Washington, DCoffice /remote.The role is contingent upon additional funding.

We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division — a full-spectrum cybersecurity organization covering endpoint protection, event monitoring, threat intelligence, and advanced incident response. This is a hands-on engineering role, not an architecture or design position. You will be in the environment every day, operating and improving the security controls that protect the organization's cloud and web-based assets while maintaining and hardening the Linux server infrastructure that supports them.

Your work spans two equally important disciplines. On the cloud and web side, you will plan, implement, and monitor security measures across enterprise cloud platforms, analyze cloud services and APIs for risk, and develop the detection and response procedures that keep those environments safe. On the Linux side, you will bring deep system-level expertise to ensure that server infrastructure is securely configured, actively monitored, and thoroughly documented.

This role is a strong fit for someone who is equally at home in a cloud console and a Linux terminal and who brings a security operations mindset to both.

Salary Range: $120,000 - $130,000
General Description of Benefits

Cloud & Web Security

• Proven experience planning, implementing, and monitoring security measures for enterprise assets hosted on cloud platforms such as AWS, Azure, or GCP
• Ability to analyze cloud services, APIs, and log payloads to ensure they meet industry security standards and organizational requirements
• Experience developing and maintaining standard operating procedures for cloud-based security event handling
• Familiarity with cloud-native security tooling including Cloud Access Security Brokers (CASBs), Cloud Security Posture Management (CSPM), and cloud workload protection platforms
• Experience with cloud architectures including SaaS and PaaS, and common commercial platforms such as Google Workspace, Microsoft 365, and AWS
• Understanding of web application security concepts including OWASP vulnerabilities, API security, and web application firewall (WAF) management
• Experience with cloud IAM frameworks, role-based access control, and Zero Trust Architecture as applied to cloud environments
• Ability to create custom detection mechanisms that correlate log sources across cloud environments to surface potential intrusions

Linux Server

• Strong hands-on experience administering and hardening Linux server environments in an enterprise setting
• Proficiency with Linux security tooling, system logging frameworks, and monitoring utilities
• Experience reviewing system and application logs, identifying anomalies, and taking appropriate corrective action
• Ability to create and maintain thorough documentation for Linux-based systems, including installation, configuration, and troubleshooting procedures
• Experience supporting security continuous monitoring efforts including vulnerability management, system patching, and risk assessments within Linux environments
• Working knowledge of network protocols, firewall management, and secure server configuration in Linux-based infrastructure

Security Operations & Collaboration

• Ability to identify capability gaps and recommend improvements at both the technical and process level
• Experience contributing to the development of detection standards, security procedures, and operational documentation
• Ability to collaborate across teams including cybersecurity, networking, systems administration, and technology support partners
• Comfortable communicating technical findings and risk clearly to both technical peers and senior leadership

A minimum of 5+ years of experience in information technology or cybersecurity is required, with at least 3+ years of direct, hands-on experience implementing or supporting cloud-based security. Candidates with demonstrated experience across both cloud security operations and Linux server administration in an enterprise environment will be strongly preferred.