Sr. Cloud Security Engineer

American business solutions inc; Mechanicsville (PA); On-site; USD 140,000 - 190,000; Full time

Job summary

American business solutions inc in Mechanicsville, PA, is seeking an experienced Cloud Security Engineer to own security across Azure-based enterprise workloads. You will identify vulnerabilities, guide remediation, and collaborate with engineering teams to enforce secure design and deployment.

The role requires hands-on expertise in IAM, SIEM, vulnerability management, and regulatory frameworks. You will communicate risk to executives and help drive security posture across large

Qualifications

• Experience in cloud security engineering for enterprise environments.
• Proven ability to implement security controls in production clouds.
• Strong knowledge of SIEM, log analytics, and incident response.

Responsibilities

• Identify cloud security vulnerabilities and prioritize remediation.
• Lead complex cloud security initiatives and guide engineers.
• Influence secure configurations and enforce gates in pipelines.
• Explain security risks to non-technical stakeholders.
• Assist audits and maintain security documentation.

Skills

Cloud security leadership

Incident response

Vulnerability management

SIEM expertise

Network security

IAM RBAC PAM

Regulatory compliance

NIST CSF CIS

Threat hunting

Executive communication

Tools

Nessus

Tenable

Defender

Splunk

Microsoft Sentinel

CNAPP

Azure Firewall

Azure Monitor

Application Gateway

NSG

Job description

Engagement Type

Contract

Key Responsibilities

• Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
• Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments
• Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
• Explain complex security risks to non-technical stakeholders
• Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
• Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
• Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
• Monitor security events using SIEM technologies and work with VDOT’s SOC team to coordinate incident response activities.
• Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
• Lead investigation and containment of cloud security incidents.
• Review firewall and NSG rule requests and ensure compliance with security standards.
• Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.
• Must have the ability to work independently on assigned projects.

Required/Desired Skills

Skill Required/Desired Amount of Experience

Enterprise Cloud Experience Required 8.0 Years Enterprise Cloud Security Experience Required 5.0 Years Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering Required Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency Required Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks Required Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams Required Candidate must have in-depth experience working with application teams to continuously improve the organization’s cloud security posture Required Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics, Required Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation. Required Candidate musth have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis Required Candidate must have experiences coordinating during cyber incidents Required Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender) Required Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP), Required Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting Required Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis. Required Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards. Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization Required Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM) Required Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP) Required Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements Required Candidate must have experience creating Azure Automation runbooks to support incident response workflows. Required Candidate must have experience with Identity and access management (IAM), Role-based Access control (RBAC), and Privileged Access Management (PAM) Required Candidate must have experience with Least-privilege access and multi-factor authentication Required Candidate must have experience working in highly regulated environments with large government agencies or similar regulatory environments. Required Candidate must have ability to communicate technical issues to technical, non-technical, and executive audiences. Required Candidate must have ability mentor junior engineers. Required Required: Azure Security Engineer Associate, Security+, Certified Cloud Security Professional certifications Required Preferred: CCSP, Designing Microsoft Azure Infrastructure (AZ-305) Desired

Skills :

Enterprise Cloud Experience,Enterprise Cloud Security Experience,Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering,Candidatte must be highly experienced in cybersecurity,networking,identity,security operations,and have a deep cloud engineering competency,Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks,Candidate must have in-depth experience designing practical solutions,implementing controls,and working with infrastructure teams,Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture,Candidate must have experience setting up Network Security Groups (NSGs),resource manager and management groups,monitor and log analytics,,Candidate must have experience setting up Azure Firewall,Azure WAF,Azure Monitor,Application Gateways,virtual networks and network segmentation.,Candidate must have experiences in: Incident response,Security investigations,Log analysis,Threat intelligence,Security monitoring,IOC analysis,Candidate must have experiences coordinating during cyber incidents,Candidate must have experience in vulnerability management,remediation tracking,vulnerability scanning tools (e.g. Nessus,Tenable,Defender),Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments,Candidate must have experience with the SIEM products (e.g. Splunk,Microsoft Sentinel,CNAPP),,Candidate must have experience with log management,security analytics,SOC integration,Threat detection,and Threat hunting,Candidate must also have hands on expertise validating indexer parsers,leveraging Splunk Query Language for monitoring and data analysis.,Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards.,Candidate must have experience with; SEC530,CIS Benchmarks,NIST CSF,NIST 800-53,Zero Trust principles,Candidate must have experience in cloud vulnerability management,remediation tracking,and risk assessment and prioritization,Candidate must have experience in cloud risk assessment and prioritization,attack surface management,and Cloud Security Posture Management (VSPM),Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP),Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements,Candidate must have experience creating Azure Automation runbooks to support incident response workflows.,Candidate must have experience with Identity and access management (IAM),Role-based Access control (RBAC),and Privileged Access Management (PAM),Candidate must have experience with Least-privilege access and multi-factor authentication,Candidate must have experience working in highly regulated environments with large government agencies or similar regulatory environments.,Candidate must have ability to communicate technical issues to technical,non-techical,and executive audiences.,Candidate must have ability mentor junior engineers.,Required: Azure Security Engineer Associate,Security+,Certified Cloud Security Professional certifications