Cloud Security Engineer

Cloud Security Engineer Everforth ECS is seeking a Cloud Security Engineer to work in our Arlington, VA office/remote.

We're looking for a security engineer who understands vulnerability management as an end-to-end discipline. Not just scanning, but contextualizing findings, eliminating false positives, and driving remediation outcomes across engineering, development and platform teams. You have hands-on experience operating security tooling across AWS and Azure, you can perform architecture reviews and deliver actionable guidance, and you're comfortable supporting ATO processes and continuous monitoring under RMF. You work well without heavy direction, you know how to prioritize risk in complex environments, and you can translate technical findings into clear reporting for both technical and executive audiences. You are comfortable giving technical presentations to leadership, that results in understanding and acceptance. You are familiar with Artificial Intelligence GPT prompting.

What You'll Do

Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments

Conduct authenticated and unauthenticated scans of web applications, APIs, servers, databases, and network devices

Perform risk-based analysis of findings including false positive validation, asset context evaluation, and remediation verification

Partner with platform, cloud, and application teams to drive sustainable remediation outcomes

Implement, operate, and tune CSPM tools, vulnerability scanners, and application security tooling across AWS, Azure, and GCP

Perform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controls

Support static, dynamic, container, and dependency scanning and help dev teams understand and fix what's found

Perform secure configuration reviews against DISA STIGs and other security baselines

Automate vulnerability validation, remediation tracking, and control validation using Python, Bash, PowerShell, and Terraform

Manage certificate lifecycle including inventory, renewal tracking, and deployment coordination

Support ATO activities, POA&M management, and RMF Step 6 continuous monitoring

Build and maintain runbooks, technical reports, executive dashboards, and risk summaries

Assist during security audits and incident response investigations involving vulnerable systems

Prototype and provide training on new tools and solutions.

Salary: $140,000 - $170,000

General Description of Benefits

Must have US citizenship.

Ability to pass a Public Trust investigation.

Bachelor's degree in a related field.

7 years of overall IT experience, with at least 3 years focused specifically on cloud security or vulnerability management

CISSP, CISA, CISM, or relevant cloud provider certifications required

Hands-on scripting experience in Python, Bash, or PowerShell

Familiarity with compliance frameworks including SOC 2, CIS, NIST, or ISO 27001

Understanding of CVEs, CWEs, CVSS scoring, and how to apply them in practice

Experience generating AI GPT prompts to produce the expected output