Cloud Security Engineer - Remote, Vulnerability Risk

ecsfederal; Virginia (MN); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Everforth ECS is seeking a Cloud Security Engineer to work in Arlington, VA office or remote. The role focuses on end-to-end vulnerability management across cloud and on-prem environments, with hands-on experience in AWS, Azure, and CSPM tools.

The engineer will conduct scans, analyze findings, and drive remediation across engineering and platform teams, while supporting RMF and ATO processes and reporting to leadership.

Qualifications

• 7 years of IT experience, with at least 3 years focused on cloud security or vulnerability management
• US citizenship and ability to pass a Public Trust investigation
• Bachelor's degree in a related field
• CISSP, CISA, CISM, or relevant cloud provider certifications required
• Hands-on scripting experience in Python, Bash, or PowerShell
• Familiarity with compliance frameworks (SOC 2, CIS, NIST, ISO 27001)

Responsibilities

• Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments
• Conduct authenticated and unauthenticated scans of web apps, APIs, servers, databases, and network devices
• Perform risk-based analysis of findings including false positives, asset context, and remediation verification
• Partner with platform, cloud, and application teams to drive sustainable remediation outcomes
• Implement and tune CSPM tools, vulnerability scanners, and app security tooling across AWS, Azure, and GCP
• Perform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controls
• Support static, dynamic, container, and dependency scanning; help dev teams fix findings
• Automate remediation tracking and control validation using Python, Bash, PowerShell, Terraform
• Build runbooks, technical reports, executive dashboards, and risk summaries
• Assist during security audits and incident response investigations involving vulnerable systems
• Prototype and provide training on new tools and solutions

Skills

Vulnerability management

Cloud security

RMF/ATO

Technical reporting

Executive communication

Scripting: Python

Scripting: Bash

Scripting: PowerShell

Education

Bachelor's degree

Security certifications (CISSP/CISA/CISM)

Tools

Terraform

PowerShell

Python

Bash

Job description

Everforth ECS is seeking a Cloud Security Engineer to work in Arlington, VA office or remote. The role focuses on end-to-end vulnerability management across cloud and on-prem environments, with hands-on experience in AWS, Azure, and CSPM tools.

The engineer will conduct scans, analyze findings, and drive remediation across engineering and platform teams, while supporting RMF and ATO processes and reporting to leadership.