Senior Cloud Security Engineer

Pyramid Consulting, Inc; United States; Remote; USD 123,984 - 125,623; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid sick leave

Job summary

A leading consulting firm is seeking a Senior Cloud Security Engineer for a 4-month contract with long-term potential. This remote position in the Financial Industry involves deploying security tools, analyzing vulnerabilities, and consulting with teams on secure coding. Candidates should have strong application security experience and relevant certifications to succeed. Competitive pay is offered, along with benefits like health insurance and a 401(k) plan.

Qualifications

• Strong experience with application security tools.
• Hands-on experience with container security.
• Proficiency in scripting languages for automation.
• Deep understanding of secure SDLC and vulnerabilities.
• Ability to troubleshoot complex scanning issues.

Responsibilities

• Deploy and configure container scanning tools.
• Analyze vulnerabilities and prioritize remediation.
• Develop custom scripts to automate security processes.
• Consult with development teams on security guidelines.
• Document findings and communicate effectively.

Skills

Application security tools

Container security

Scripting languages

Secure software development lifecycle

Vulnerability triage

Communication skills

CI/CD pipelines integration

Cloud-native security

API security testing

DevSecOps practices

Education

Relevant certifications (OSWE, GWAPT, CSSLP)

Tools

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Black Duck

Snyk

Job description

Pyramid Consulting, Inc provided pay range

This range is provided by Pyramid Consulting, Inc. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$90.00/hr - $91.19/hr

Immediate need for a talented Senior Cloud Security Engineer. This is a 04 months contract opportunity with long-term potential and is located in Elkhorn,NE (Remote). Please review the job description below and contact me ASAP if you are interested.

Job ID:25-94911

Pay Range: $90 - $91.19/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Deploy and configure container scanning tools to ensure secure containerized environments.
• Analyze vulnerabilities identified through SAST, DAST, SCA, and container scans, prioritizing remediation based on risk.
• Develop and maintain custom scripts to automate security processes and enhance scanning capabilities.
• Consult with development teams to provide secure coding guidance and assist with remediation strategies.
• Onboard applications into DAST scanning workflows, ensuring proper configuration and coverage.
• Configure and troubleshoot DAST scans, resolving issues related to application accessibility and scan accuracy.
• Review and validate SAST and SCA findings, confirming or rejecting false positives and “mitigated by design” claims from development teams.
• Document findings, create actionable reports, and communicate technical details effectively to stakeholders.

Key Requirements and Technology Experience:

• Strong experience with application security tools: DAST (e.g., Burp Suite, OWASP ZAP), SAST (e.g., Checkmarx, Veracode), and SCA (e.g., Black Duck, Snyk).
• Hands‑on experience with container security and deployment of scanning tools (e.g., Wiz, Prisma, Aqua Security).
• Proficiency in scripting languages (Python, Bash, or PowerShell) for automation and tool integration.
• Deep understanding of secure software development lifecycle (SDLC) and common vulnerabilities (OWASP Top 10).
• Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
• Strong analytical skills for vulnerability triage and risk prioritization.
• Excellent communication skills for consulting with development teams and explaining technical findings.
• Experience integrating security tools into CI/CD pipelines.
• Familiarity with cloud-native security (AWS, Azure, GCP) and container orchestration (Kubernetes).
• Knowledge of API security testing and microservices architecture.
• Exposure to DevSecOps practices and security automation frameworks.
• Relevant certifications such as OSWE, GWAPT, or CSSLP.

Our client is a leading Financial Industry, and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Seniority level

Not Applicable

Employment type

Contract

Job function

Information Technology