Cyber Security Engineer (Cloud Security)

New

TherapyNotesHealthcare software

Philadelphia, Pennsylvania, United StatesFull-TimeMiddle

SalaryCompetitive salary - $110,000-$130,000

Apply NowOpens the employer's application page

Job Details

Experience: 5+ years of experience in cloud security engineering or related role.
Required Skills: AWSKubernetesAzureTerraform

Have 5+ years of experience in cloud security engineering or a related role.
Bring hands-on experience securing cloud infrastructure and cloud-based applications; Azure is preferred and AWS is a plus.
Have hands-on network security experience and a strong understanding of network architecture, connectivity, segmentation, and firewall controls.
Have experience securing Kubernetes and containerized workloads, including network policy, workload identity, and runtime protection.
Have experience with CSPM and remediating cloud misconfigurations.
Have experience securing infrastructure-as-code orchestration platforms, including access control, secrets management, and deployment approvals; Terraform or OpenTofu are examples.
Have experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time privileged access.
Have experience with Zero Trust or SASE tooling, such as Cloudflare Zero Trust, WAF, or Gateway.
Know security frameworks such as NIST, ISO 27001, and CIS, and compliance frameworks including HITRUST and PCI DSS.
Be able to conduct security assessments, vulnerability management, and incident response.
Have a strong understanding of Windows and Linux operating systems and endpoint security.
A bachelor’s degree in information security, computer science, or a related field is preferred; equivalent experience is considered.
Industry certifications such as CISSP, SSCP, Security+, or an Azure/AWS cloud security certification are preferred.

Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
Secure Kubernetes and containerized workloads through network policies, workload identity, runtime protection, and image scanning.
Identify and remediate cloud misconfigurations through cloud security posture management.
Secure Terraform/OpenTofu infrastructure-as-code platforms, including access control, secrets management, and deployment approval workflows.
Manage identities in Microsoft Entra ID using Conditional Access, Entitlement Management, and just-in-time privileged access.
Review network diagrams and connectivity changes, advising on segmentation and sensitive data flows with IT and SRE teams.
Administer Zero Trust network access and edge security tooling, and manage broader security solutions including SIEM, DLP, E/XDR, and vulnerability management.
Monitor alerts, respond to and escalate incidents, and participate in the incident-response on-call rotation.
Conduct threat analysis, vulnerability assessments, risk evaluations, cloud configuration reviews, and access reviews; document findings and mitigation status.
Develop security queries, scripts, integrations, and automated workflows; collaborate with development teams on SDLC and CI/CD security and support audits and GRC efforts.

View Full Description & ApplyYou'll be redirected to the employer's site