Sr. Cloud Security Engineer

Talent Connection; Pleasanton (CA); On-site; USD 180,000 - 210,000; Full time

Job summary

Talent Connection seeks a Senior Cloud Security Engineer to lead the design, implementation, and ongoing security of cloud infrastructure, workloads, and data across public and hybrid environments. You will drive CSPM, CWPP, DSPM, SSPM adoption, automation, governance, and secure DevOps integration, partnering with GRC, Infra, and Engineering teams.

Ideal candidates have 10+ years in information security and 5+ years designing cloud security in AWS, Azure, or GCP, with strong scripting and IaC

Qualifications

• 10+ years of Information Security experience across enterprise cloud environments.
• 5+ years designing and implementing cloud security solutions in AWS/Azure/GCP.
• Strong CSPM/CWPP/DSPM/SSPM knowledge.
• Experience securing Kubernetes and Docker.
• Knowledge of Zero Trust, IAM, PAM, and secure authentication technologies.
• Experience with logging, SIEM integrations, and threat detection.
• Experience with Infrastructure as Code (Terraform, CloudFormation) and security automation.
• Ability to design enterprise cloud security architectures aligned with frameworks and compliance.

Responsibilities

• Design and maintain cloud security architectures across public and hybrid clouds.
• Develop and manage security controls for cloud infrastructure, applications, containers, and data.
• Lead CSPM, CWPP, DSPM, SSPM implementations and related security tech.
• Develop automation and remediation workflows to improve response times.
• Collaborate with GRC, Infra, DevOps, and Engineering to meet security standards.
• Evaluate emerging cloud security technologies and propose improvements.
• Define cloud security standards, documentation, and runbooks.
• Build and maintain monitoring, logging, and alerting across cloud platforms.
• Implement Zero Trust principles and least-privilege access.
• Secure container workloads, Kubernetes environments, APIs, and cloud-native apps.
• Integrate security into CI/CD pipelines.
• Participate in architecture reviews and threat modeling.

Skills

Cloud security

CSPM

CWPP

DSPM

SSPM

Zero Trust

IAM

PAM

Terraform

Python

PowerShell

CI/CD Security

Kubernetes

Docker

Threat detection

SIEM

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

AWS

Azure

GCP

Terraform

CloudFormation

Kubernetes

Docker

Job description

• Compensation: USD 180000 - USD 210000 - yearly

Company Description

Sr. Cloud Security Engineer

Position Overview

Company Description

Talent Connection partners with top enterprise organizations and we are seeking a highly experienced Cloud Security Engineer to lead the design, implementation, and continuous improvement of security controls across modern cloud environments. This role is responsible for securing cloud infrastructure, workloads, applications, and data while driving automation, governance, and security best practices across the organization.

The ideal candidate has extensive experience building cloud-native security solutions, developing scalable security architectures, and partnering with cross-functional teams to reduce risk without limiting business agility. This individual will also serve as a technical leader, evaluating emerging technologies and helping shape the organization's long-term cloud security strategy.

Job Description

Key Responsibilities

• Design, implement, and maintain cloud security architectures across public and hybrid cloud environments.
• Develop and manage security controls that protect cloud infrastructure, applications, containers, and enterprise data.
• Lead implementation of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Data Security Posture Management (DSPM), SaaS Security Posture Management (SSPM), and related cloud security technologies.
• Develop security automation and remediation workflows to improve operational efficiency and reduce response times.
• Partner with Governance, Risk, and Compliance (GRC), Infrastructure, DevOps, and Engineering teams to ensure cloud solutions meet organizational security standards.
• Evaluate emerging cloud security technologies and recommend improvements that strengthen the organization's overall security posture.
• Define cloud security architecture standards, technical documentation, implementation guides, and operational procedures.
• Build and maintain security monitoring, logging, and alerting capabilities across cloud platforms.
• Implement Zero Trust security principles, identity protection, secure access controls, and least-privilege models.
• Secure containerized workloads, Kubernetes environments, APIs, and cloud-native applications.
• Collaborate with engineering teams to integrate security into cloud deployments and CI/CD pipelines.
• Participate in architecture reviews, threat modeling, and security assessments for new cloud initiatives.
• Develop automation scripts and infrastructure-as-code solutions that improve security operations and compliance.
• Stay current on emerging cloud threats, attack techniques, and evolving security technologies.

Qualifications

Required Qualifications

• 10+ years of Information Security experience, including significant experience supporting enterprise-scale cloud environments.
• 5+ years designing and implementing cloud security solutions in AWS, Azure, or Google Cloud Platform.
• Strong understanding of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), DSPM, SSPM, and cloud-native security services.
• Experience securing container platforms such as Kubernetes and Docker.
• Knowledge of Zero Trust Architecture, Identity and Access Management (IAM), privileged access, and secure authentication technologies.
• Experience implementing cloud logging, monitoring, SIEM integrations, and threat detection solutions.
• Experience with Infrastructure as Code (Terraform, CloudFormation, or similar) and security automation.
• Ability to design enterprise cloud security architectures aligned with industry frameworks and compliance requirements.
• Strong scripting or automation experience using PowerShell, Python, Bash, or similar languages.
• Excellent communication skills with the ability to collaborate across technical and business teams.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related discipline preferred. Relevant cloud and security certifications are highly desirable.

Additional Information

Preferred Technical Skills

• AWS, Microsoft Azure, or Google Cloud Platform
• Cloud Security Posture Management (CSPM)
• Data Security Posture Management (DSPM)
• SaaS Security Posture Management (SSPM)
• Zero Trust Architecture
• Identity & Access Management (IAM)
• Security Automation & Orchestration
• Infrastructure as Code (Terraform, CloudFormation)
• CI/CD Security
• Cloud Compliance & Security Frameworks

Core Competencies

• Strategic problem-solving and analytical thinking
• Strong technical leadership and collaboration skills
• Ability to influence cross-functional teams and drive security initiatives
• Adaptability in fast-changing cloud environments
• Strong planning, prioritization, and execution skills
• Continuous learning and commitment to cybersecurity best practices

Cloud Security (AWS, Azure, GCP, CSPM, CWPP, DSPM, SSPM)

Identity & Zero Trust (IAM, Entra ID, Okta, SSO, MFA, PAM)

Cloud Security Automation (Terraform, Python, PowerShell, CI/CD Security, Security Orchestration)

Job Location