SK Cloud Security Engineer

Probity Inc.; Herndon (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

A leading cybersecurity firm in Herndon, VA, is seeking a motivated Cloud Security Engineer to enhance its information security posture. The role involves utilizing advanced tools, optimizing security strategies in Oracle Cloud and Google Cloud platforms, and mentoring analysts within the team. Ideal candidates must possess an active Top Secret/SCI Clearance and significant experience in cloud security and incident response.

Qualifications

• 5+ years experience in cyber incident response.
• 3+ years in architecting or securing solutions within GCP or OCI.
• Experience with log management and ETL concepts.

Responsibilities

• Design strategies for detecting/responding to cyber incidents in cloud platforms.
• Create detection rules for sophisticated cloud attacks.
• Serve as SME during critical cloud security incidents.

Skills

Cloud Security Principles

Incident Response

Data Ingestion and Analysis

Scripting (Python, Bash)

Cybersecurity

Education

High School Diploma with 15+ years experience or Bachelor's degree with 11+ years experience

Degree in Computer Science or Information Security

Tools

Google Cloud Platform (GCP)

Oracle Cloud Infrastructure (OCI)

Job description

PLEASE NOTE: This position requires an ACTIVE Top Secret/SCI Clearance with Polygraph. To be considered for this position, you MUST have an ACTIVE Clearance Level of Top Secret/SCI with Polygraph

Position Code: 26-SC0619-1

Seeking a motivated, career and customer-oriented Cloud Security Engineer to join our team in Herndon, VA. Join a team of cybersecurity experts that protects and defends the largest

target in the world. As a Cloud Security Engineer on our team, you will utilize the latest tools available and assist in creating new ones while allowing you to advance the nation’s information security posture.

Responsibilities include but are not limited to:

• Design and champion the strategy for detecting and responding to cyber incidents within Oracle Cloud Infrastructure (OCI) or Google Cloud Platform (GCP)
• Create advanced detection rules and tradecraft to uncover sophisticated cloud-based attacks
• Optimize data pipelines to fuel rapid incident analysis and proactive threat hunting in the cloud
• Serve as the Subject Matter Expert (SME) during critical cloud security incidents, guiding the CSOC team to swift resolution
• Continuously evaluate emerging cloud security tools and techniques to enhance our defenses and response capabilities
• Partner with cross-functional teams and mentor less experienced analysts to build a stronger cloud security posture across the organization

Minimum Qualifications:

• High School Diploma and 15+ years of experience in cloud or cyber security or Bachelor’s degree and 11+ years of experience
• 5+ years of experience in cyber incident response
• 3+ years’ experience architecting, engineering, implementing, or securing solutions within Google Cloud Platform (GCP) OR Oracle Cloud Infrastructure (OCI)
• 2+ years’ experience with data ingestion, processing, and analysis of data relevant to security investigations, such as log management, basic ETL concepts or similar.
• Experience with at least one scripting language, such as Python or Bash, for task automation or security analysis
• Experience with cloud security principles, including identity and access management, network security, and data protection within the chosen platform (GCP or OCI)

Preferred Qualifications:

• Degree in Computer Science, Information Security, or a related technical field Relevant Certifications such as CISSP, CCSP, CCSK, GCFA, GCIH, or cloud-specific security certifications (e.g., Google Cloud Security Engineer, Oracle Cloud Security Architect)
• Experience in security services and best practices within either Google Cloud Platform (GCP Security Command Center, Chronicle, IAM, Networking) OR Oracle Cloud Infrastructure (OCI Cloud Guard, Security Zones, IAM, Networking)
• Experience leading and coordinating complex cloud security incident investigations, including forensic analysis and containment strategies
• Ability to develop and implement automation scripts and workflows (e.g., Python, Cloud Functions/Lambdas, SOAR platforms) to enhance incident response efficiency