Cloud Security Specialist

Virginia Farm Bureau Mutual Insurance; Richmond (VA); Vor Ort; USD 148.000 - 164.000; Vollzeit

Benefits dieser Stelle

Medical and dental insurance

401K plan

Paid time off (PTO)

Training reimbursement

Zusammenfassung

Virginia Farm Bureau Mutual Insurance is hiring a Cloud Security Specialist to advance the organization’s cloud security program across Azure and AWS. You will monitor posture, manage identities, and safeguard data while coordinating remediation with security and infrastructure teams.

The role emphasizes DevSecOps practices, IaC review, and policy-as-code in a growth-oriented environment, with a strong emphasis on governance and risk.

Qualifikationen

• Bachelor’s degree or equivalent in cybersecurity or IT.
• 2+ years in cybersecurity, network security, or DevSecOps.
• 3–5 years administering Azure and/or AWS.

Aufgaben

• Monitor Azure and AWS for misconfigurations and drift.
• Tune cloud security posture management services.
• Investigate alerts and coordinate remediation.
• Maintain cloud security dashboards and inventories.
• Support IAM, MFA, RBAC, and conditional access.
• Review secure landing zones and network security.
• Configure secure load balancers, WAFs, API gateways.
• Integrate security into deployments; review IaC.
• Support security scanning in CI/CD pipelines.
• Policy as code via Azure Policy and AWS SCPs/Config.
• Protect data with encryption and key management.
• Produce security metrics for leadership; governance.

Kenntnisse

Cloud security

Identity and access management

RBAC

Cloud networking

Encryption

Logging

Secure configuration

IaC review

DevSecOps

Python or PowerShell scripting

Ausbildung

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

Microsoft Defender for Cloud

AWS Security Hub

AWS GuardDuty

Azure DevOps Pipelines

Git

Azure Policy

AWS SCPs

AWS Config

Terraform

CloudFormation

Bicep/ARM

OAuth 2.0 / OIDC / SAML

Jobbeschreibung

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cloud Security Specialist

Information Services Full Time Richmond, VA, US

2 days ago Requisition ID: 1015

Salary Range: $148,000.00 To $164,000.00 Annually

POSITION SUMMARY

The Cloud Security Specialist supports day-to-day execution of the organization’s cloud security program across Microsoft Azure and Amazon Web Services. The role monitors cloud security controls, secures identity and access, reviews cloud and network architecture, integrates security into deployment pipelines, protects cloud-hosted data, and coordinates remediation with Information Security, Infrastructure, and Application Development. This is a growth-oriented role for a candidate with foundational to intermediate cybersecurity, cloud, or DevOps experience.

PRIMARY DUTIES

Cloud Security Operations and Posture Management

Monitor Azure and AWS environments for misconfigurations, vulnerabilities, policy violations, suspicious activity, and drift from CIS Benchmarks and approved baselines.

Administer and tune cloud security posture management and cloud-native security services, including Microsoft Defender for Cloud, AWS Security Hub, and AWS GuardDuty.

Investigate cloud security alerts, document findings, coordinate remediation with system and application owners, and elevate high-risk findings to senior staff.

Maintain cloud security dashboards, asset inventories, and landing zone usage and reporting.

Identity and Access Management

Support Azure and AWS identity controls, including Microsoft Entra ID, AWS IAM, role-based access control (RBAC), least privilege, multifactor authentication, conditional access, and privileged access management.

Review roles, service principals, managed identities, access keys, and excessive or inactive access; support identity federation and SSO using OAuth 2.0, OpenID Connect, and SAML.

Cloud Architecture and Network Security

Support secure landing zone design, hub-and-spoke topology, environment separation, and network zoning using NSGs, AWS security groups, network ACLs, and private endpoints.

Support secure configuration of load balancers and gateways (Azure Application Gateway, Azure Load Balancer, AWS ALB/NLB, API gateways), cloud WAF, CASB, and API security controls.

Review proposed cloud architectures for sound security design and elevate design concerns to senior staff.

Secure Cloud Engineering and DevSecOps

Integrate security requirements into deployments; review infrastructure-as-code (Bicep, ARM, Terraform, CloudFormation) and configurations for security risks.

Support security scanning, secrets detection, and policy checks in Azure DevOps (ADO) pipelines.

Implement and maintain security policy as code using Azure Policy, AWS Service Control Policies, and AWS Config rules.

Data Security in the Cloud

Support secure configuration of storage, databases, encryption, secrets, and key management (Azure Key Vault, AWS KMS).

Support data classification, labeling, and DLP with Microsoft Purview, and governance controls for Microsoft Fabric and Copilot, including oversharing risk.

Monitoring and Incident Response

Ensure cloud audit, security, and data access logs reach security monitoring platforms; support investigations, triage, and documentation for cloud-related incidents.

Cloud Risk, Compliance, and Reporting

Support risk assessments, audit evidence collection, and assessment of cloud controls against NIST, CIS Benchmarks, NYDFS, Virginia BOI, PCI-DSS, and other requirements.

Prepare cloud security metrics and reports for leadership; document standards, procedures, diagrams, and exceptions.

ADDITIONAL DUTIES

Participate in security awareness, tabletop exercises, and training; perform other duties as assigned.

MINIMUM EDUCATIONAL / EXPERIENCE QUALIFICATIONS

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field. Equivalent work experience in lieu of degree is considered.

Two or more years of experience in cybersecurity, network security, DevSecOps, or related work.

Three to five years of hands-on experience administering Microsoft Azure and/or Amazon Web Services.

MINIMUM SKILL QUALIFICATIONS

Working knowledge of cloud security, identity and access management, RBAC, cloud networking, encryption, logging, and secure configuration.

Experience reviewing infrastructure as code, deployment pipelines, containers, or cloud-hosted applications.

Strong analytical, troubleshooting, documentation, communication, and teamwork skills.

PREFERRED QUALIFICATIONS

Experience with Microsoft Entra ID, Microsoft Defender for Cloud, AWS Security Hub, AWS GuardDuty, SIEM, or comparable cloud security tools.

Experience with Azure DevOps pipelines, Git, and policy as code (Azure Policy, AWS SCPs, AWS Config).

Experience with landing zones, hub-and-spoke design, cloud WAF, CASB, API security, and Azure CAF or AWS Well-Architected Framework.

Experience with Microsoft Purview, Fabric, and Copilot governance; identity protocols (OAuth 2.0, OIDC, SAML, PKI).

Container security (Docker, Kubernetes) and scripting in Python or PowerShell.

Security+, Microsoft Azure Security Engineer Associate (AZ-500), AWS Certified Security – Specialty, or equivalent certification.

Familiarity with NIST CSF, CIS Controls, ISO 27001/2, PCI-DSS, SOX, HIPAA, GDPR, GLBA, CNAPP/CWPP concepts, EDR/MDR, and Linux and Windows administration.

REPORTING RELATIONSHIP

Reports To: Manager, Active Defense & Security Operations

OTHER DUTIES

This job description describes the general nature and level of work assigned and is not an exhaustive list of responsibilities, duties, or skills. Other job-related duties may be assigned.

At VA Farm Bureau, we provide an exceptional benefits package, including ongoing job development and support in all roles, paid training and continuing education reimbursement, medical and dental insurance available on your first day, generous employee 401K contribution, excellent Paid Time off (PTO) plan and more!

Virginia Farm Bureau Companies provide equal employment opportunity in all aspects of employment without regard to race, color, national origin, religion, gender, pregnancy, age, disability, orientation or veteran status.