Cloud Security Engineer — CTEM & Vulnerability Lead

CDM Smith; Mount Pleasant (SC); Hybrid; USD 130,000 - 210,000; Full time

Job summary

CDM Smith is seeking a Cyber Engineer in Mount Pleasant, SC to advance the Continuous Threat Exposure Management (CTEM) program. You will identify, track, and verify remediation of vulnerabilities across internal and external systems, working with IT, security operations, and development teams.

The role requires broad knowledge of enterprise apps, cloud infrastructure, and threat landscapes, with hands-on experience in cloud security, IAM, IaC, and automation to reduce attack surface.

Qualifications

• Bachelor's degree required; 8 years of related experience preferred.
• Experience in vulnerability management and cloud security.
• Ability to architect, deploy, and operate secure cloud infrastructure.
• Strong collaboration with security, IT, and development teams.

Responsibilities

• Develop and maintain secure, resilient cloud and on-prem processes in tandem with architects and system engineers.
• Deploy strong identity and access management controls across applications and computing environments.
• Lead vulnerability management activities and remediation efforts.
• Document security policies and controls and enforce improvements.
• Collaborate with security leadership and business units to reduce risk and improve posture.
• Stay updated on threats and apply best practices to reduce attack surface.

Skills

Cloud tools

Bicep

AKS

Terraform

Kafka

Kubernetes

Helm

OpenShift

Scripting (Python, JavaScript)

Zero trust

WAF

Vulnerability management

Threat intelligence

NIST 800-144/171

ISO 27040/27001

Education

Bachelor's degree

Tools

Puppet

Chef

Ansible

Job description

CDM Smith is seeking a Cyber Engineer in Mount Pleasant, SC to advance the Continuous Threat Exposure Management (CTEM) program. You will identify, track, and verify remediation of vulnerabilities across internal and external systems, working with IT, security operations, and development teams.

The role requires broad knowledge of enterprise apps, cloud infrastructure, and threat landscapes, with hands-on experience in cloud security, IAM, IaC, and automation to reduce attack surface.