Senior Cloud Security Engineer
New
P
PeratonCloud security
Remote (but must reside and perform all work within the United States), Work online from 8:00 AM Eastern to 5:00 PM Eastern.Full-TimeSenior
Salary$135,000 - $216,000. This represents the typical salary range for this position. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of experience in information security, including 5+ years in cloud security engineering; degree and experience alternatives: Bachelor's degree and 12 years, Master's degree and 10 years, Associate's degree and 14 years, or high school diploma/equivalent and 16 years.
- Required Skills
- AWSPythonBashGCPAzureTerraform
Requirements
- Meet one of the stated education and experience combinations: Bachelor's degree and 12 years of experience; Master's degree and 10 years; Associate's degree and 14 years; or high school diploma/equivalent and 16 years.
- Have 8+ years of information security experience, including 5+ years in cloud security engineering.
- Have hands-on security experience in at least three of AWS, Azure, GCP, and OCI.
- Have expertise with Qualys VMDR, Cloud Agent, and Policy Compliance, and Tenable.io, Tenable.sc, or Nessus for vulnerability scanning, analysis, and reporting.
- Have demonstrated experience conducting threat hunts and investigations using the MITRE ATT&CK framework.
- Be proficient writing queries and analyzing logs in Splunk, Microsoft Sentinel, Elastic, or an equivalent SIEM or log platform.
- Have experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services.
- Have an in-depth understanding of cloud identity and access management, network security, encryption, and logging architecture.
- Have scripting or automation experience in Python, PowerShell, or Bash, and familiarity with Terraform or Ansible.
- Have working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls.
- Relevant certifications are preferred, including CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer.
Responsibilities
- Plan and conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI using threat intelligence and the MITRE ATT&CK framework.
- Analyze cloud-native telemetry and SIEM data to investigate suspicious activity.
- Administer and optimize Qualys and Tenable scanning across cloud tenants, including scan policies, agent and connector deployment, asset coverage, and credentialed scanning.
- Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation based on exploitability, asset criticality, and exposure, including CISA Known Exploited Vulnerabilities.
- Lead remediation with engineering and patching teams, and verify closure through rescanning.
- Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations.
- Develop and tune detection rules, queries, and automated hunt playbooks.
- Support incident response through scoping, containment recommendations, and root cause analysis.
- Produce hunt reports, remediation tracking, and POA&M inputs, and brief findings and risk to customers, ISSOs/ISSMs, and leadership.
- Mentor junior security engineers in threat hunting techniques, vulnerability analysis, and tool usage.
View Full Description & ApplyYou'll be redirected to the employer's site
