Senior Cloud Security Engineer

Peraton; United States; Remote; USD 135,000 - 216,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) with company match

PTO and holidays

Job summary

Peraton is seeking a Senior Cloud Security Engineer to lead proactive threat hunting, vulnerability analysis, and remediation across a multi-cloud environment with 70+ customer tenants. The role requires hands-on experience across AWS, Azure, GCP, OCI, and strong collaboration with engineering and security teams.

Responsibilities include configuring and tuning Qualys and Tenable, conducting threat hunts using MITRE ATT&CK, and developing detections and playbooks, while mentoring junior engineers

Qualifications

• Bachelors degree and 12 years of experience or a Masters degree and 10 years of experience or an Associates degree and 14 years of experience or a High School diploma/eqivalent and 16 years of experience.
• Must be a U.S. Citizen with the ability to obtain/maintain a DHS Public Trust.
• 8+ years of experience in information security, including 5+ years in cloud security engineering
• Hands-on security experience in at least three of the following cloud platforms: AWS, Azure, GCP, and OCI
• Expertise with Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus) for vulnerability scanning, analysis, and reporting
• Demonstrated experience conducting threat hunts and investigations using the MITRE ATT&CK framework
• Proficiency writing queries and analyzing logs in a SIEM or log platform (Splunk, Microsoft Sentinel, Elastic, or equivalent)
• Experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services
• In-depth understanding of cloud identity and access management, network security, encryption, and logging architecture
• Scripting or automation experience in Python, PowerShell, or Bash, and familiarity with infrastructure-as-code (Terraform, Ansible)
• Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls

Responsibilities

• Plan and conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI environments, using threat intelligence and the MITRE ATT&CK framework to identify adversary activity that automated tools have not detected
• Analyze cloud-native telemetry alongside SIEM data to investigate suspicious activity
• Administer and optimize Qualys and Tenable scanning across all cloud tenants, including scan policies and credentialed scanning
• Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation by exploitability and exposure
• Lead remediation of identified threats and vulnerabilities, working with engineering and patching teams to patch or harden, and verify closure through rescanning
• Identify and remediate cloud misconfigurations and excessive IAM permissions
• Develop and tune detection rules, queries, and automated hunt playbooks for repeatable detections
• Support incident response as a senior technical resource, including scoping, containment, and root cause analysis
• Produce hunt reports, remediation tracking, and POA&M inputs; brief findings to customers and leadership
• Mentor junior security engineers in threat hunting techniques, vulnerability analysis, and tool usage

Skills

Threat hunting

Cloud security

Vulnerability analysis

Incident response

Log analysis

Scripting (Python/PowerShell/Bash)

Automation / IaC (Terraform/Ansible)

MITRE ATT&CK

SIEM (Splunk/Sentinel/Elastic)

Vulnerability scanning

Education

Bachelor's degree

Master's degree

Associates degree

High School diploma / eqivalent

Tools

Qualys

Tenable

Splunk

Microsoft Defender for Cloud

Elastic

Terraform

Ansible

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About The Role

Peraton is looking for a Senior Cloud Security Engineer to lead proactive threat hunting, vulnerability analysis, and remediation in support of a multi-cloud environment with 70+ customer tenants and growing. Aside from technical qualifications, the applicant should have effective communication skills, both written and verbal. The applicant must have hands-on security experience across multiple cloud platforms (AWS, Azure, GCP, OCI) and expertise with Qualys and Tenable for vulnerability management. This role goes beyond scanning: the engineer will form and test threat hypotheses, correlate vulnerability, configuration, and log data to find active or likely compromise, and drive findings through to verified remediation. An investigative mindset, strong analytical skills, and attention to detail are prerequisites for this position. The Senior Security Engineer will collaborate closely with our customers, internal engineering and patching teams, and ISSOs/ISSMs to ensure threats are identified early, risk is prioritized accurately, and remediation is completed and documented.

Location: Remote (but must reside and perform all work within the United States)

Work hours: This position requires working online from 8:00 AM Eastern to 5:00 PM Eastern

Day to Day Roles and Responsibilities

• Plan and conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI environments, using threat intelligence and the MITRE ATT&CK framework to identify adversary activity that automated tools have not detected
• Analyze cloud-native telemetry (AWS CloudTrail and GuardDuty, Microsoft Defender for Cloud and Azure Monitor, Google Security Command Center, OCI Cloud Guard and Audit logs) alongside SIEM data to investigate suspicious activity
• Administer and optimize Qualys and Tenable (Tenable.io/Tenable.sc/Nessus) scanning across all cloud tenants, including scan policies, agent and connector deployment, asset coverage, and credentialed scanning
• Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation by exploitability, asset criticality, and exposure, including CISA Known Exploited Vulnerabilities (KEV)
• Lead remediation of identified threats and vulnerabilities, working with engineering and patching teams to patch, harden, or apply compensating controls, and verify closure through rescanning
• Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations
• Develop and tune detection rules, queries, and automated hunt playbooks so successful hunts become repeatable detections
• Support incident response as a senior technical resource, including scoping, containment recommendations, and root cause analysis
• Produce hunt reports, remediation tracking, and POA&M inputs, and brief findings and risk to customers, ISSOs/ISSMs, and leadership
• Mentor junior security engineers in threat hunting techniques, vulnerability analysis, and tool usage

Qualifications

Basic Qualifications:

• Bachelors degree and 12 years of experience or a Masters degree and 10 years of experience or an Associates degree and 14 years of experience or a High School diploma/eqivalent and 16 years of experience.
• Must be a U.S. Citizen with the ability to obtain/maintain a DHS Public Trust.
• 8+ years of experience in information security, including 5+ years in cloud security engineering
• Hands-on security experience in at least three of the following cloud platforms: AWS, Azure, GCP, and OCI
• Expertise with Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus) for vulnerability scanning, analysis, and reporting
• Demonstrated experience conducting threat hunts and investigations using the MITRE ATT&CK framework
• Proficiency writing queries and analyzing logs in a SIEM or log platform (Splunk, Microsoft Sentinel, Elastic, or equivalent)
• Experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services
• In-depth understanding of cloud identity and access management, network security, encryption, and logging architecture
• Scripting or automation experience in Python, PowerShell, or Bash, and familiarity with infrastructure-as-code (Terraform, Ansible)
• Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls

Preferred Qualifications

• One or more relevant certifications such as CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer

Details

Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.