Cloud Security Engineer

ECS; Washington (District of Columbia); Hybrid; USD 120,000 - 130,000; Full time

Job summary

Everforth ECS is actively seeking a Cloud Security Engineer to secure our cloud and Linux server infrastructure in a hybrid Washington, DC area role. You will implement security controls across enterprise cloud platforms, analyze cloud services for risk, and develop rapid response procedures while hardening Linux environments.

The role emphasizes hands-on engineering, incident response, and collaboration with cross-functional teams.

Qualifications

• Experience planning, implementing, and monitoring security measures for enterprise cloud assets (AWS/Azure/GCP).
• Ability to analyze cloud services, APIs, and logs for security compliance.
• Experience developing standard operating procedures for cloud security event handling.
• Familiarity with CASB, CSPM, and cloud workload protection platforms.
• Understanding of SaaS/PaaS architectures and common platforms (Google Workspace, Microsoft 365, AWS).
• Knowledge of OWASP, API security, and WAF management.
• Experience with RBAC and Zero Trust in cloud environments.
• Ability to create detection mechanisms across cloud logs.

Responsibilities

• Plan, implement, and monitor security controls for enterprise cloud assets.
• Analyze cloud services/APIs for risk and develop detection/response procedures.
• Collaborate with cybersecurity, networking, and IT teams to improve security posture.

Skills

Cloud security

CASB

CSPM

WAF management

Zero Trust

RBAC

SIEM tooling

Multi-cloud

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Terraform

CloudFormation

Docker

Kubernetes

Job description

Job Description

Everforth ECS is seeking a Cloud Security Engineer to work in our Washington, DC office / remote. The role is contingent upon additional funding. We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division — a full-spectrum cybersecurity organization covering endpoint protection, event monitoring, threat intelligence, and advanced incident response. This is a hands‑on engineering role, not an architecture or design position. You will be in the environment every day, operating and improving the security controls that protect the organization's cloud and web-based assets while maintaining and hardening the Linux server infrastructure that supports them. Your work spans two equally important disciplines. On the cloud and web side, you will plan, implement, and monitor security measures across enterprise cloud platforms, analyze cloud services and APIs for risk, and develop the detection and response procedures that keep those environments safe. On the Linux side, you will bring deep system-level expertise to ensure that server infrastructure is securely configured, actively monitored, and thoroughly documented. This role is a strong fit for someone who is equally at home in a cloud console and a Linux terminal and who brings a security operations mindset to both.

Salary Range: $120,000 - $130,000

General Description Of Benefits

Required Skills

Cloud & Web Security

• Proven experience planning, implementing, and monitoring security measures for enterprise assets hosted on cloud platforms such as AWS, Azure, or GCP
• Ability to analyze cloud services, APIs, and log payloads to ensure they meet industry security standards and organizational requirements
• Experience developing and maintaining standard operating procedures for cloud-based security event handling
• Familiarity with cloud-native security tooling including Cloud Access Security Brokers (CASBs), Cloud Security Posture Management (CSPM), and cloud workload protection platforms
• Experience with cloud architectures including SaaS and PaaS, and common commercial platforms such as Google Workspace, Microsoft 365, and AWS
• Understanding of web application security concepts including OWASP vulnerabilities, API security, and web application firewall (WAF) management
• Experience with cloud IAM frameworks, role-based access control, and Zero Trust Architecture as applied to cloud environments
• Ability to create custom detection mechanisms that correlate log sources across cloud environments to surface potential intrusions

Linux Server

• Strong hands‑on experience administering and hardening Linux server environments in an enterprise setting
• Proficiency with Linux security tooling, system logging frameworks, and monitoring utilities
• Experience reviewing system and application logs, identifying anomalies, and taking appropriate corrective action
• Ability to create and maintain thorough documentation for Linux-based systems, including installation, configuration, and troubleshooting procedures
• Experience supporting security continuous monitoring efforts including vulnerability management, system patching, and risk assessments within Linux environments
• Working knowledge of network protocols, firewall management, and secure server configuration in Linux-based infrastructure

Security Operations & Collaboration

• Ability to identify capability gaps and recommend improvements at both the technical and process level
• Experience contributing to the development of detection standards, security procedures, and operational documentation
• Ability to collaborate across teams including cybersecurity, networking, systems administration, and technology support partners
• Comfortable communicating technical findings and risk clearly to both technical peers and senior leadership

A minimum of 5+ years of experience in information technology or cybersecurity is required, with at least 3+ years of direct, hands‑on experience implementing or supporting cloud-based security. Candidates with demonstrated experience across both cloud security operations and Linux server administration in an enterprise environment will be strongly preferred.

Desired Skills

• Scripting and automation experience in Python, Bash, Perl, or PowerShell to support cloud security operations and Linux administration
• Experience with SIEM platforms and log aggregation tools such as Microsoft Sentinel, Splunk, or equivalent
• Container security experience with Docker, Kubernetes, or equivalent platforms
• Familiarity with DevSecOps practices and integrating security controls into CI/CD pipelines
• Experience with multi-cloud or hybrid cloud environments
• Infrastructure-as-code (IaC) security experience with tools such as Terraform or CloudFormation
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred
• Relevant certifications such as AWS Certified Security Specialty, Microsoft Azure Security Engineer (AZ-500), Google Professional Cloud Security Engineer, CCSP, or equivalent are strongly preferred

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high‑performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!