Cloud Security Engineer

Cloud Security EngineerCandidate Requirements:Cloud Security Engineer with the following qualifications:Candidate must be available to perform services during standard Eastern Time business hours.• Minimum of three (3) years of hands-on experience securing AWS and Microsoft Azure environments.• Experience implementing cloud security best practices across multi-cloud environments.• Experience securing Kubernetes (EKS) and Amazon ECS Fargate container workloads.• Hands-on experience with Splunk for security monitoring, log analysis, and cloud security investigations.• Experience implementing DevSecOps practices and securing CI/CD pipelines, including source code, dependency, Infrastructure-as-Code (IaC), and secrets scanning.• Experience identifying, analyzing, and remediating Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM) findings in AWS and Azure environments.• Experience with AWS Security Hub, AWS GuardDuty, Microsoft Defender for Cloud, CNAPP platforms, and vulnerability management tools such as Tenable.• Experience performing cloud security architecture reviews and Infrastructure-as-Code (Terraform/CloudFormation) security reviews.• Experience securing Microsoft Entra ID and AWS IAM through conditional access, IAM roles and policies, least-privilege access, and cross-account access controls.• Strong analytical, documentation, communication, and problem-solving skills with the ability to work independently.Primary Responsibilities:• Provide services primarily in support of enterprise cloud security initiatives, including the following:• Secure AWS and Microsoft Azure environments by implementing cloud security best practices.• Monitor and investigate cloud security events using Splunk and cloud-native security tools.• Review, analyze, and remediate CSPM and CIEM findings, including IAM permissions, excessive privileges, and cloud misconfigurations.• Secure Kubernetes (EKS) clusters and Amazon ECS Fargate container workloads.• Implement security controls throughout CI/CD pipelines, including code, dependency, IaC, and secrets scanning.• Perform cloud security architecture reviews, IAM assessments, and Infrastructure-as-Code security reviews.• Utilize AWS Security Hub, GuardDuty, Microsoft Defender for Cloud, CNAPP platforms, and Tenable to identify and mitigate security risks.• Prepare documentation of security findings, remediation recommendations, and technical procedures, and collaborate with engineering teams to resolve complex cloud security issues.• Develop technical documentation and provide knowledge transfer to other security analysts, as needed.Minimum Requirements / Education:• Bachelor’s degree in Cyber Security, Information Technology, Computer Science, or an equivalent combination of education and work experience.• Minimum of three (3) years of experience in cloud security engineering or cloud security operations.• Hands-on experience securing AWS and Microsoft Azure environments.• Experience with enterprise cloud security tools and DevSecOps practices.• AWS, Azure, CISSP, CCSP, or other relevant cloud security certifications are preferred.