Remote Cloud Security Engineer: Vulnerability & Risk

ECS Corporate Services; Arlington (VA); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Everforth ECS in Arlington, VA is seeking a Cloud Security Engineer to join our hybrid office/remote team. You will own vulnerability management end-to-end across cloud, on-prem, and applications, drive remediation, and present findings to technical and executive audiences.

You have hands-on experience with AWS, Azure, and GCP, perform risk-based analysis, architecture reviews, support RMF/ATO processes, and automate tasks with Python/Bash/PowerShell.

Qualifications

• Bachelor's degree in a related field is required.
• 7 years IT experience with at least 3 years in cloud security/vulnerability management.
• Certifications: CISSP, CISA, CISM or relevant cloud provider certs.
• Hands-on scripting in Python, Bash or PowerShell.
• Familiarity with SOC 2, CIS, NIST, ISO 27001.
• Experience generating AI prompts for GPT-based outputs.

Responsibilities

• Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments.
• Conduct authenticated and unauthenticated scans of web apps, APIs, servers, databases, and network devices.
• Perform risk-based analysis of findings including false positives and remediation verification.
• Partner with platform, cloud, and application teams to drive remediation.
• Implement and tune CSPM tools and scanners across AWS, Azure, and GCP.
• Perform security architecture reviews covering IAM, encryption, logging, and network controls.
• Support static, dynamic, container, and dependency scanning and guide dev teams.
• Automate validation and reporting with scripting.

Skills

Vulnerability management

Risk-based analysis

Security architecture reviews

Executive reporting

Automation (Python/Bash/PowerShell/Ter

Cloud security (AWS/Azure/GCP)

Threat triage

Education

Bachelor's degree in a related field

Tools

AWS

Azure

GCP

CSPM tools

Vulnerability scanners

DISA STIGs

Job description

Everforth ECS in Arlington, VA is seeking a Cloud Security Engineer to join our hybrid office/remote team. You will own vulnerability management end-to-end across cloud, on-prem, and applications, drive remediation, and present findings to technical and executive audiences.

You have hands-on experience with AWS, Azure, and GCP, perform risk-based analysis, architecture reviews, support RMF/ATO processes, and automate tasks with Python/Bash/PowerShell.