Senior Cloud Security Engineer — Secure DevOps & Apps

Jobtailor; Town of Florida (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

JobTailor is seeking an experienced cybersecurity professional to deliver security testing and threat discovery for Navy Federal cloud workloads. You will embed security in the cloud product lifecycle, act as SME with development teams, and design secure architectures for Web, Mobile, and Microservices.

Strong knowledge of AI security tooling and security frameworks is required. The role emphasizes independent work and collaboration, with advanced experience in Java, Python, .NET, and scripting

Qualifications

• Bachelor’s Degree in Information Technology or equivalent education, training, or experience.
• 6+ years in cybersecurity and/or application security.
• Experience with cloud security posture management and SaaS security posture management tools.
• Experience with cloud security analysis, design techniques, and risk assessments.
• Knowledge of security frameworks such as OWASP, NIST, and ISO.
• Experience building secure software using OWASP ASVS, BSIMM, or NIST SSDF.
• Software development experience in Java, Python, .NET, and scripting languages.
• Knowledge of secure architectures for Web, Mobile, Microservices, and AI patterns.
• Familiarity with AI/ML security frameworks (OWASP LLM top 10, MITRE ATLAS, NIST AI RMF).
• Experience with threat modeling, fuzzing, static/dynamic analysis, and pentesting.
• Strong organizational, planning, time management, and analytical skills.

Responsibilities

• Deliver security testing, continuous threat discovery and exposure management of Navy Federal cloud workloads.
• Embed security seamlessly into the product development lifecycle for cloud applications and environments.
• Serve as a technical interface and SME with development teams on securing cloud infrastructure and workloads.
• Design, implement, and operationalize security capabilities.
• Support continuous security monitoring, threat and vulnerability prevention, detection, and response on cloud assets.
• Work independently under limited supervision and/or in a team environment.

Skills

Java

Python

.NET

Scripting languages

Security best practices

Threat modeling

Static and dynamic analysis

Penetration testing

Cloud security

AI security tooling

Security frameworks

Secure software development

Communication skills

Education

Bachelor's Degree in Information Technology

Tools

Defender for Cloud

Obsidian Security

Adaptive Shield

AppOmni

Prisma Cloud

Orca Security

Wiz.io

Job description

JobTailor is seeking an experienced cybersecurity professional to deliver security testing and threat discovery for Navy Federal cloud workloads. You will embed security in the cloud product lifecycle, act as SME with development teams, and design secure architectures for Web, Mobile, and Microservices.

Strong knowledge of AI security tooling and security frameworks is required. The role emphasizes independent work and collaboration, with advanced experience in Java, Python, .NET, and scripting