Cloud Security Engineer - Multi-Cloud & CSPM Expert

AECOM; Town of Texas (WI); Hybrid; USD 120,000 - 180,000; Full time

Job summary

AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team, responsible for defining control requirements, identifying risk, and remediation across AWS and Azure clouds. The role partners with Infrastructure and Application teams to enforce baselines and standards.

The position offers a hybrid work schedule and must be based in Dallas or Houston, TX, with duties including CSPM, reporting, and ongoing cloud security improvements.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or related field preferred.
• 6+ years of IT/cybersecurity experience with cloud security focus or equivalent.
• Experience with AWS and Microsoft Azure environments.
• Experience with CSPM/CNAPP tools (Prisma Cloud, Qualys TotalCloud, CrowdStrike Cloud Security).
• Strong understanding of cloud security concepts, IAM, and network security.

Responsibilities

• Perform Cloud Security Posture Management (CSPM) and enforce security controls.
• Identify misconfigurations and drive remediation with infra and app teams.
• Track remediation progress and report to leadership on cloud security posture.
• Define risk metrics and reporting standards for cloud security governance.
• Partner with Security Architecture to translate standards into actionable requirements.
• Support policy updates, tuning, and incident response for cloud security.
• Provide backup support for Proofpoint Email Gateway and related security tasks.
• Drive continuous improvement of cloud security tooling and processes.

Skills

AWS

Azure

CSPM

TotalCloud

Cloud Security

IAM

Education

Bachelor’s degree (BA/BS) in IT or related field

Tools

Prisma Cloud

Qualys TotalCloud

CrowdStrike Cloud Security

Job description

AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team, responsible for defining control requirements, identifying risk, and remediation across AWS and Azure clouds. The role partners with Infrastructure and Application teams to enforce baselines and standards.

The position offers a hybrid work schedule and must be based in Dallas or Houston, TX, with duties including CSPM, reporting, and ongoing cloud security improvements.