Senior Cloud Security Manager - Public Trust Eligible

Cherokee Federal; Almont (CO); On-site; USD 165,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K

Other benefits as provided

Job summary

Cherokee Federal seeks a Senior Cloud Technical Manager to lead cloud security operations for NSF, owning monitoring, incident response, vulnerability management, and secure cloud operations across AWS environments.

You will drive detection engineering maturity, automation, governance, and compliance while mentoring a team of analysts and engineers. This role requires strong leadership and cross-team collaboration.

Qualifications

• 7+ years in cybersecurity/cloud security or security operations; 3+ years leading technical teams.
• Hands-on experience securing and operating production cloud environments (AWS/Azure; GCP acceptable).
• Strong experience with SIEM operations, log onboarding, correlation rules, alert tuning, and investigative workflows.
• Experience with cloud incident response, evidence handling and root-cause analysis.
• Knowledge of cloud IAM, networking, encryption, key management, and secure service configurations.
• Experience with vulnerability management tools and coordinating remediation across engineering teams.
• Ability to write clear operational documentation and deliver concise executive-ready status reporting.
• Security-first technical leadership with decisive incident-command capabilities.
• Strong prioritization and risk-based decision-making skills.
• Ability to drive effective execution across technical and business teams.
• Clear communication with technical teams and senior stakeholders.
• Public Trust preferred.

Responsibilities

• Lead cloud security operations for NSF AWS environments, including triage, investigation, containment, and recovery.
• Own Splunk Enterprise Security content and operations, including data onboarding, CIM alignment, correlation searches, tuning, and dashboards.
• Own Prisma Cloud CSPM outcomes, including posture baselines, policy standards, exceptions, remediation workflows, and risk-tracking.
• Engineer and mature AWS logging and detection coverage; integrate CloudTrail, VPC Flow Logs, Route 53 Resolver logs, ALB/ELB logs, AWS Config, CloudWatch, GuardDuty, and Security Hub.
• Lead detection engineering mapped to MITRE ATT&CK; improve detection fidelity and reduce false positives.
• Define and execute AWS incident response playbooks and escalation paths; ensure evidence capture and post-incident actions.
• Drive continuous monitoring and compliance with FISMA and NIST 800-53; support audits with repeatable evidence packages.
• Partner with cloud platform, network, and application teams to implement guardrails (IAM least privilege, MFA, KMS encryption, segmentation, centralized logging).
• Prioritize and track remediation of misconfigurations and findings; automate workflows where possible.
• Establish operational metrics and reporting cadence (MTTD, MTTR, coverage, posture trends).
• Manage team performance and mentor analysts; participate in after-hours escalation and on-call duties.
• Perform other job-related duties as assigned.

Skills

Cloud security leadership

AWS/Azure/GCP

SIEM operations

Incident response

MITRE ATT&CK

Automation scripting

Tools

Splunk ES

Prisma Cloud

AWS Config

GuardDuty

CloudTrail

VPC Flow Logs

Security Hub

IAM

Job description

Cherokee Federal seeks a Senior Cloud Technical Manager to lead cloud security operations for NSF, owning monitoring, incident response, vulnerability management, and secure cloud operations across AWS environments.

You will drive detection engineering maturity, automation, governance, and compliance while mentoring a team of analysts and engineers. This role requires strong leadership and cross-team collaboration.