Remote Senior Cloud Threat Hunter & Security Engineer

Peraton; United States; Remote; USD 135,000 - 216,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) with company match

PTO and holidays

Job summary

Peraton is seeking a Senior Cloud Security Engineer to lead proactive threat hunting, vulnerability analysis, and remediation across a multi-cloud environment with 70+ customer tenants. The role requires hands-on experience across AWS, Azure, GCP, OCI, and strong collaboration with engineering and security teams.

Responsibilities include configuring and tuning Qualys and Tenable, conducting threat hunts using MITRE ATT&CK, and developing detections and playbooks, while mentoring junior engineers

Qualifications

• Bachelors degree and 12 years of experience or a Masters degree and 10 years of experience or an Associates degree and 14 years of experience or a High School diploma/eqivalent and 16 years of experience.
• Must be a U.S. Citizen with the ability to obtain/maintain a DHS Public Trust.
• 8+ years of experience in information security, including 5+ years in cloud security engineering
• Hands-on security experience in at least three of the following cloud platforms: AWS, Azure, GCP, and OCI
• Expertise with Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus) for vulnerability scanning, analysis, and reporting
• Demonstrated experience conducting threat hunts and investigations using the MITRE ATT&CK framework
• Proficiency writing queries and analyzing logs in a SIEM or log platform (Splunk, Microsoft Sentinel, Elastic, or equivalent)
• Experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services
• In-depth understanding of cloud identity and access management, network security, encryption, and logging architecture
• Scripting or automation experience in Python, PowerShell, or Bash, and familiarity with infrastructure-as-code (Terraform, Ansible)
• Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls

Responsibilities

• Plan and conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI environments, using threat intelligence and the MITRE ATT&CK framework to identify adversary activity that automated tools have not detected
• Analyze cloud-native telemetry alongside SIEM data to investigate suspicious activity
• Administer and optimize Qualys and Tenable scanning across all cloud tenants, including scan policies and credentialed scanning
• Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation by exploitability and exposure
• Lead remediation of identified threats and vulnerabilities, working with engineering and patching teams to patch or harden, and verify closure through rescanning
• Identify and remediate cloud misconfigurations and excessive IAM permissions
• Develop and tune detection rules, queries, and automated hunt playbooks for repeatable detections
• Support incident response as a senior technical resource, including scoping, containment, and root cause analysis
• Produce hunt reports, remediation tracking, and POA&M inputs; brief findings to customers and leadership
• Mentor junior security engineers in threat hunting techniques, vulnerability analysis, and tool usage

Skills

Threat hunting

Cloud security

Vulnerability analysis

Incident response

Log analysis

Scripting (Python/PowerShell/Bash)

Automation / IaC (Terraform/Ansible)

MITRE ATT&CK

SIEM (Splunk/Sentinel/Elastic)

Vulnerability scanning

Education

Bachelor's degree

Master's degree

Associates degree

High School diploma / eqivalent

Tools

Qualys

Tenable

Splunk

Microsoft Defender for Cloud

Elastic

Terraform

Ansible

Job description

Peraton is seeking a Senior Cloud Security Engineer to lead proactive threat hunting, vulnerability analysis, and remediation across a multi-cloud environment with 70+ customer tenants. The role requires hands-on experience across AWS, Azure, GCP, OCI, and strong collaboration with engineering and security teams.

Responsibilities include configuring and tuning Qualys and Tenable, conducting threat hunts using MITRE ATT&CK, and developing detections and playbooks, while mentoring junior engineers