Remote Cloud Security Engineer - Infrastructure Risk Reduction

The Elite Job

Sedona (AZ)

Hybrid

USD 110,000 - 190,000

Full time

29 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

The Elite Job is seeking a skilled Cloud Security Engineer focused on Infrastructure Risk Reduction to strengthen cloud security, reduce vulnerabilities, and protect critical systems across AWS, Azure, and GCP. You will assess configurations, manage access, and automate security processes while collaborating with cloud architects, DevOps, and cybersecurity teams.

The ideal candidate will have hands-on experience with IAM, encryption, CSPM, and infrastructure-as-code, and a proactive mindset to

Qualifications

Bachelor's degree or equivalent practical experience.
Experience with at least one major cloud platform (AWS, Azure, or GCP).
Familiarity with IAM and network security concepts.
Experience with IaC tools like Terraform, CloudFormation, or Bicep.
Security monitoring, logging, and incident response familiarity.
Strong communication and collaboration skills.

Responsibilities

Cloud Infrastructure Security: Design, implement, and maintain security controls across cloud environments to protect computing resources, storage systems, databases, networks, and applications.
Risk Assessment and Reduction: Conduct regular cloud infrastructure risk assessments to identify misconfigurations, excessive permissions, exposed services, insecure protocols, and other security weaknesses.
Vulnerability Management: Identify, prioritize, track, and remediate vulnerabilities across cloud workloads, operating systems, containers, virtual machines, and infrastructure components.
Security Configuration Management: Establish secure configuration baselines for cloud services, network components, storage resources, and compute environments.
Identity and Access Management: Implement least-privilege access policies, role-based access controls, multifactor authentication, and secure identity lifecycle management.
Cloud Network Protection: Configure and review virtual networks, firewalls, security groups, network access controls, private endpoints, and segmentation policies to reduce unauthorized access.
Infrastructure as Code Security: Review Terraform, CloudFormation, and other infrastructure-as-code templates to identify security weaknesses before infrastructure is deployed.
Security Automation: Develop scripts and automated workflows to detect configuration drift, enforce security policies, assess compliance, and accelerate remediation activities.
Monitoring and Threat Detection: Configure cloud-native security monitoring and logging solutions to detect suspicious activities, unauthorized changes, and potential security incidents.
Incident Response: Support the investigation, containment, and resolution of cloud security incidents, including compromised credentials, exposed resources, and unauthorized access.
Data Protection: Implement encryption at rest and in transit, secure key management, secrets management, backup protection, and appropriate data access restrictions.
Compliance and Governance: Help maintain alignment with applicable security standards, regulatory requirements, and internal policies, such as ISO 27001, NIST Cybersecurity Framework, CIS Benchmarks, and relevant cloud security benchmarks.
DevSecOps Collaboration: Integrate security checks into CI/CD pipelines and development workflows to identify infrastructure risks early in the deployment lifecycle.
Documentation and Reporting: Maintain accurate security documentation, risk registers, remediation plans, configuration standards, and technical assessment reports.
Cross-Functional Collaboration: Work closely with engineering, IT operations, compliance, and development teams to implement practical security improvements without unnecessarily disrupting business operations.
Continuous Improvement: Monitor emerging cloud security threats, evaluate new security technologies, and recommend improvements to infrastructure resilience and risk management practices.