Senior Cloud Security Engineer

Esvee Technologies Inc; Mechanicsville (VA); Presencial; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Esvee Technologies Inc. seeks a highly experienced cloud security professional to lead secure cloud architectures and engineering across our enterprise environments.

The ideal candidate combines cybersecurity and cloud engineering expertise with hands-on delivery, incident response, risk-based controls, and collaboration with infrastructure and application teams to continuously improve cloud security posture.

Formación

• Extensive cloud security and cloud engineering experience across enterprise environments.
• Ability to bridge strategic architecture and hands-on engineering with risk awareness.
• Design and implement practical security controls and monitoring solutions.
• Experience with Azure security services, governance, and policy enforcement.
• Proven incident response, log analysis, threat intelligence, and security monitoring skills.
• Experience coordinating during cyber incidents and with governance teams.
• Vulnerability management expertise with scanning tools (Nessus/Tenable, Defender).
• Familiarity with SIEMs (Splunk, Microsoft Sentinel) and CNAPP concepts.
• Proficient in log management, SOC integration, threat detection, and threat hunting.
• Knowledge of standards: SEC530, CIS Benchmarks, NIST CSF/800-53, Zero Trust.

Conocimientos

Cloud security

Cybersecurity

Networking

Identity management

Security operations

Cloud engineering

Incident response

Threat detection

Threat hunting

Threat intelligence

Vulnerability management

Security governance coordination

Log analysis

Security monitoring

Risk assessment

Herramientas

Nessus/Tenable (vulnerability scanning)

Microsoft Defender

Azure Firewall

Azure Monitor

Application Gateways

CNAPP

Splunk

Microsoft Sentinel

Descripción del empleo

• Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering
• Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency
• Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks
• Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams
• Candidate musth have in-depth experience working with application teams to continuously improve the organization’s cloud security posture
• Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics
• Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation
• Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis
• Candidate must have experiences coordinating during cyber incidents
• Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender)
• Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments
• Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP)
• Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting
• Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis
• Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards
• Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles
• Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization
• Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM)
• Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP)
• Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements