Senior Cloud Security Engineer (Hybrid)

Socket.dev; Sacramento (CA); Hybrid; USD 170,000 - 210,000; Full time

Benefits offered by this job

Paid time off

Health benefits

401(k) with match

Employee Assistance Program (EAP)

Educational assistance

Job summary

Recology seeks an experienced cloud security specialist to evolve its technology landscape while expanding security across Azure, AWS, and GCP. The role emphasizes secure configurations, guardrails, and threat detection within hybrid cloud environments.

You will work with IT, security, and engineering teams to embed security into architecture, migration, and deployment, driving risk-based decisions and ongoing governance.

Qualifications

• 10+ years of information security or cybersecurity, with hands-on Azure cloud experience.
• 5+ years of experience with GCP, AWS, and Azure.
• Experience with regulatory frameworks (NIST CSF, PCI DSS, ISO 27001, CCPA).
• Strong technical skills in cloud security controls, IAM, endpoint security, and device compliance.

Responsibilities

• Designs, implements, and manages cloud security controls across Azure, AWS, and GCP.
• Advances security in the migration from on-prem to cloud by embedding security into architecture and deployment.
• Maintains cloud security baselines, guardrails, and configuration standards (CSPM, identity, networking, data protection).
• Configures native cloud security services (Defender for Cloud, Security Center, Security Hub).
• Acts as cloud security SME supporting design reviews, threat modeling, and security validation.

Skills

Azure security

GCP

AWS

NIST CSF

PCI DSS

ISO 27001

CCPA

IAM

Scripting

Threat modeling

Education

Bachelor's degree in Information Security

Tools

SIEM

CSPM

EDR

IAM platforms

Job description

Recology seeks an experienced cloud security specialist to evolve its technology landscape while expanding security across Azure, AWS, and GCP. The role emphasizes secure configurations, guardrails, and threat detection within hybrid cloud environments.

You will work with IT, security, and engineering teams to embed security into architecture, migration, and deployment, driving risk-based decisions and ongoing governance.