Cloud Security Engineer: AWS Threat Hunting & IR

Quantum Sky; Washington (District of Columbia); Hybrid; USD 170,000 - 210,000; Full time

Job summary

Quantum Sky is seeking a Cloud Security Engineer to help our Federal client monitor and secure their expanding cloud footprint. You will be the foremost Cloud Security expert in a large enterprise SOC, enhancing AWS alerting, response procedures, cloud hunting, and incident response.

The role requires eight years in cybersecurity, with six in cloud security within an enterprise SOC, strong collaboration with stakeholders, and the ability to translate technical concepts for non-technical

Qualifications

• Eight years of cybersecurity experience, with at least six years as a Cloud Security Engineer in an enterprise SOC environment.
• Proven expertise in cloud threat hunting across SaaS, PaaS, and IaaS (O365, SIEM, EDR, and related tools).
• Experience leading cloud incident response efforts and deploying cloud security controls.

Responsibilities

• Perform cloud hunting and identify embedded threats effectively and efficiently.
• Review and analyze cloud logs to bring relevance and context to the data.
• Lead cloud incident response activities as they occur.
• Develop a full set of cloud incident response playbooks.
• Work with stakeholders to ensure full visibility into workloads running in the cloud.
• Ensure all cloud logs are onboarded to the SIEM tool and the correct events are logged.
• Develop and implement a full set of monitoring use cases to enable DOJ security tools to detect cloud threats.
• Continuously tune security tools for optimization with maximum blocking and minimal false positives.
• Devise and implement KPIs and metrics to monitor cloud security health.
• Ensure DOJ’s participation in threat information-sharing initiatives across the USG.
• Assist the engineering team with deployment, configuration, and maintenance of cloud-based SOC tools.
• Perform research and lead PoC efforts for additional technologies.

Skills

Cloud security

Threat hunting

Incident response

Communication

Team collaboration

Tools

AWS

Azure

Google Cloud

SIEM

EDR

Job description

Quantum Sky is seeking a Cloud Security Engineer to help our Federal client monitor and secure their expanding cloud footprint. You will be the foremost Cloud Security expert in a large enterprise SOC, enhancing AWS alerting, response procedures, cloud hunting, and incident response.

The role requires eight years in cybersecurity, with six in cloud security within an enterprise SOC, strong collaboration with stakeholders, and the ability to translate technical concepts for non-technical