Senior Cloud Security Engineer - Federal SOC IR Lead

Quantum Sky; Washington (District of Columbia); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health/Dental/Vision

Job summary

Quantum Sky seeks a Cloud Security Engineer to join a Federal client’s SOC, focusing on cloud threat hunting, incident response, and secure cloud operations across AWS, Azure, and Google Cloud.

You will work in a hybrid environment with on-site Washington DC presence and contribute to playbooks, monitoring, and threat-intelligence initiatives. A Top Secret clearance with SCI eligibility is highly preferred.

Qualifications

• Able to work core business hours with occasional on-call duties.
• Willingness to work at the client site in Washington DC at least part time (hybrid).
• Eight years of cyber security experience, with at least six years as a Cloud Security Engineer in an enterprise SOC.
• Experience in cloud threat hunting across AWS, Azure, and Google Cloud.
• Experience leading incident response for cloud-based tools and systems.
• Strong understanding of EO 14028, M-21-31, NSM-8 and related policy impact.

Responsibilities

• Perform cloud threat hunting and identify embedded threats.
• Review cloud logs to provide context and relevance.
• Lead cloud incident response activities.
• Develop cloud incident response playbooks.
• Collaborate with stakeholders for visibility into cloud workloads.
• Onboard cloud logs to SIEM and ensure proper event logging.
• Develop monitoring use cases for cloud security tools.
• Tune security tools to maximize blocking with minimal false positives.
• Define KPIs to monitor cloud security health.
• Support DOJ participation in threat information sharing.
• Assist deployment and maintenance of cloud-based SOC tools.

Skills

Work hours flexibility

Strong communication

Team collaboration

Ability to explain technical concepts

Education

Bachelor’s degree or equivalent experience

Tools

AWS

Azure

Google Cloud

SIEM

EDR

Job description

Quantum Sky seeks a Cloud Security Engineer to join a Federal client’s SOC, focusing on cloud threat hunting, incident response, and secure cloud operations across AWS, Azure, and Google Cloud.

You will work in a hybrid environment with on-site Washington DC presence and contribute to playbooks, monitoring, and threat-intelligence initiatives. A Top Secret clearance with SCI eligibility is highly preferred.