Cloud Security Engineer (AWS & GCP)

Quantum Sky; United States; Remote; USD 115,000 - 140,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a Cloud Security Engineer to join our team, focusing on security engineering across AWS and Google Cloud with day-to-day hardening, remediation, and cloud operations. You will manage security tooling, incident response, and collaboration with security analysts to maintain high security for FedRAMP/FISMA/NIST aligned environments.

The role includes after-hours on-call duties and mentoring junior engineers, with a remote-friendly US work arrangement and a strong emphasis on

Qualifications

• Six (6) or more years in IT engineering/cybersecurity, with at least 3 years in cloud security engineering.
• Hands-on experience with AWS and Google Cloud Platform (GCP).
• Diagnose and resolve issues across Linux/Windows, networks, and cloud services.
• Vulnerability management, patching, and IAM.
• DevSecOps experience integrating security into cloud workflows.
• Familiarity with ITSM ticketing systems (GitLab preferred, Jira, ServiceNow).
• Strong written and verbal communication for customers and incident docs.
• Hands-on with key tools: Splunk, Tenable/Nessus, Invicti/Acunetix, Appgate, Okta, GitLab, Palo Alto, Trend Micro, Trivy, Anchore, Terraform, CloudFormation, Ansible.

Responsibilities

• Perform day-to-day security engineering, including hardening, remediation, backups, and recovery for cloud workloads.
• Support AWS and GCP environments (Windows/Linux VMs, containers, EC2, S3, RDS, Compute Engine, Cloud Storage).
• Configure, update, and maintain security tools for endpoints and log collection.
• Troubleshoot issues across network, compute, app, and identity layers using logs.
• Apply CIS, DISA STIGs, and FedRAMP controls for hardening and compliance.
• Remediate vulnerabilities identified by security tools and scans.
• Provide QA feedback during deployments to ensure compliance and operations.
• Collaborate with Security Analysts to ensure continuous delivery of security services.
• Create and maintain diagrams, SOPs, and tool configuration guides.
• Mentor junior engineers and assist client communications and issue resolution.
• On-call rotation: triage, contain, and stabilize incidents; escalate when needed.

Skills

Cloud security

AWS

GCP

Linux/Windows

IAM

Vulnerability management

Security tooling

Communication

Education

Bachelor's degree

Tools

Splunk

Tenable/Nessus

Invicti/Acunetix

Appgate

Okta

GitLab

Palo Alto Firewalls

Trend Micro Deep Security

Trivy

Anchore

Terraform

CloudFormation

Ansible

Job description

Description

Quantum Sky is hiring a Cloud Security Engineer (AWS & GCP) to join our team of cloud, security, and compliance experts. This role is primarily focused on day‑to‑day security engineering, including system hardening, vulnerability remediation, cloud operations, and security tool management across AWS & GCP environments.

In addition to regular business‑hours responsibilities, engineersparticipatein a structured after‑hours 24×7 on‑call rotation (primary or backup) to support response to incidents, alerts, and escalations for customersoperatingunder FedRAMP, FISMA, and NIST 800‑53 frameworks.

Responsibilities:

• Perform systems administration and maintenance including patching, vulnerabilityscanning,compliance scanning and remediation,backups, and recovery for cloud workloads.
• Support AWS & GCP environments, including Windows and Linux virtual machines, container workloads, and cloud services such as EC2, EBS, S3, RDS, WorkSpaces (AWS), Compute Engine, Cloud Storage, Cloud SQL (GCP), and Active Directory or equivalent identity services.
• Configure, update, andmaintainsecurity tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
• Troubleshoot issues across network, compute, application, and identity layers by reviewing logs, collecting data, and analyzing system behavior.
• Implement hardening and compliance controls using CIS Benchmarks, DISA STIGs, and FedRAMP requirements.
• Remediate vulnerabilitiesidentifiedby tools such as Tenable,Trivy,OpenSCAP,Anchore,Twistlock, and others.
• Provide quality assurance feedback during system deployments to ensure architecture meets compliance and operational requirements.
• Collaborate with Security Analysts to ensure uninterrupted delivery of security services to customers.
• Create andmaintaindocumentation including network diagrams, dataflow diagrams, SOPs, and security tool configuration guides.
• Support client communications, deliverables, and issue resolution with strong verbal and written communication skills.
• Support and mentor junior engineers as and whenrequired.
• After‑Hours 24×7 On‑Call Rotation:
  • Serve as primary or backup on‑call engineer during assigned rotation.
  • Respond to after‑hours security alerts, infrastructure incidents, outages, andConMonevents.
  • Perform initial triage, containment, and stabilization using established runbooks.
  • Investigate and respond to alerts generated.
  • Escalate complex issues to senior engineers, architects, or compliance teams.
  • Document incidents, actions taken, and recommended improvements.
  • Contribute to automation improvements and runbook enhancements.

Qualifications

Required:

• Six (6) or more years of IT engineering and/or cybersecurity experience, with at least three (3) years working in a dedicated cloud security engineering or similar position.
• Hands‑on experience with both AWS and Google Cloud Platform (GCP).
• Ability to diagnose and resolve issues across Linux and Windows systems, network infrastructure, and cloud services.
• General systems administration and vulnerability management experience, including system patching and hardening, identity and access management (IAM), and related tasks.
• Experience working in a DevSecOps environment, integrating security practices into cloud and infrastructure workflows.
• Familiarity with ITSM ticketing systems such as Gitlab (preferred), Jira, ServiceNow, etc.
• Ability to work independently during both business hours and on‑call periods.
• Strong written and verbal communication skills for customer interaction and incident documentation.
• Hands‑on experience with one or more of the following tools:
  • Splunk Enterprise
  • Tenable Security Center/Nessus
  • Invicti/Acunetix
  • Appgate
  • Okta
  • GitLab
  • Palo Alto Networks Firewalls
  • TrendMicro Deep Security
  • Trivy
  • Anchore
  • Terraform
  • CloudFormation
  • Ansible

Desired:

• Bachelor's Degree in Computer Science or other relevant field.
• Experience supporting federal/government-facing customers or consulting engagements, ensuring compliance and operational requirements.
• Experience with FedRAMP, FISMA, or NIST 800‑53 compliance frameworks.
• Prior on‑call, SRE, SOC, or incident response experience.
• Relevant AWS or Google Cloud Platform certifications.
• Security+ or other relevant industry security certification.
• Experience with infrastructure‑as‑code or automation tooling.
• Experience with Kubernetes is highly desirable.

Location:

• Remote (US)

Clearance:

• Must be a US Citizen with the ability to obtain a security clearance

About Quantum Sky

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $115,000-$140,000This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.

At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?

Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.