Cloud Security Engineer: Vulnerability & Threat Defense

CDM Smith; Dallas (TX); Remote; USD 123,000 - 215,000; Full time

Job summary

CDM Smith’s Cyber Engineer role supports the Continuous Threat Exposure Management (CTEM) journey, working with IT infrastructure, development and security teams to reduce vulnerabilities and attack surface while aligning with policy. You’ll architect secure cloud infra and drive automation, monitoring risk and performance across SaaS, IaaS, and PaaS environments.

The position emphasizes strong scripting, incident response, governance, and collaboration with business units to secure digital

Qualifications

• Bachelor's degree.
• 8 years of related experience.
• Equivalent additional directly related experience will be considered in lieu of a college degree.

Responsibilities

• Identify, track and verify remediation of vulnerabilities across internal and external applications and systems.
• Architect, deploy and operate secure cloud application infrastructure aligned to business needs.
• Lead vulnerability management and report on remediation progress to leadership.
• Collaborate with security engineering, operations, IT and development teams to balance risk and innovation.
• Monitor emerging threats and implement tactical measures to reduce attack surface.

Skills

Cloud automation

Bicep

AKS

Terraform

Kafka

Kubernetes

Helm

OpenShift

Scripting

Zero Trust

WAFs

API security

IaC

Stakeholder influence

Security standards

Policy docs

Vulnerability mgmt

KPIs tracking

Asset inventory

Remediation

Threat intel

Purple team

Analytical

Inventory management

Communication

Threat landscape

Education

Bachelor's degree

Tools

Puppet

Chef

Ansible

Job description

CDM Smith’s Cyber Engineer role supports the Continuous Threat Exposure Management (CTEM) journey, working with IT infrastructure, development and security teams to reduce vulnerabilities and attack surface while aligning with policy. You’ll architect secure cloud infra and drive automation, monitoring risk and performance across SaaS, IaaS, and PaaS environments.

The position emphasizes strong scripting, incident response, governance, and collaboration with business units to secure digital