Cloud Security Engineer

Accountabilities:: Cloud Security Engineering Design, implement, maintain, and continuously improve security controls across AWS and Microsoft Azure environments, with additional support for GCP. Ensure secure cloud configurations, appropriate access controls, and alignment with recognized industry security standards and best practices. Strengthen identity and access management (IAM), network security, encryption, logging, and cloud infrastructure protection. Security Tool Implementation and Integration Deploy, configure, administer, and optimize enterprise security solutions, including CrowdStrike, Splunk, Rapid7, and Red Canary. Integrate and maintain security technologies supporting endpoint protection, threat detection, vulnerability management, and security monitoring. Troubleshoot security platforms and ensure their effective operation across cloud environments. Threat Detection and Incident Response Investigate security alerts, analyze potential threats, and identify suspicious activity across cloud infrastructure. Support incident response activities, including threat analysis, containment coordination, and remediation planning. Develop and implement corrective measures to reduce organizational exposure to cybersecurity risks. Container and Infrastructure Security Implement security controls for containerized environments using Kubernetes, Docker, and AWS Bottlerocket. Perform container hardening, vulnerability assessments, and runtime protection activities. Promote secure container configurations, deployment practices, and infrastructure security standards. Vulnerability Management and Security Automation Identify, assess, prioritize, and remediate vulnerabilities across cloud and hybrid environments. Develop scripts, automated workflows, and repeatable processes to improve security operations and minimize manual intervention. Support continuous improvements in security monitoring, vulnerability management, and operational efficiency. Cross-Functional Collaboration Work closely with cloud architects, DevOps engineers, infrastructure specialists, and security operations teams. Integrate security requirements into cloud deployments and infrastructure development processes. Participate in security assessments and recommend improvements to strengthen the organization's overall security posture. Operational Support Maintain flexible availability aligned with U.S. time zones. Provide occasional evening, overnight, or weekend coverage when required for security incidents, operational needs, or project deadlines. Collaborate effectively with geographically distributed technical and security teams. Requirements: At least 3 years of hands-on experience in cloud security, cybersecurity engineering, or infrastructure security. Demonstrated experience securing Amazon Web Services (AWS) and/or Microsoft Azure environments. Strong understanding of AWS and Azure security services, identity and access management (IAM), network security, encryption, logging, and cloud configuration best practices. Practical experience deploying, administering, integrating, or troubleshooting enterprise security platforms, preferably CrowdStrike, Splunk, Rapid7, or Red Canary. Working knowledge of containerization and container security, particularly Kubernetes and Docker. Understanding of container vulnerability scanning, workload protection, runtime security, and secure configuration practices. Experience identifying and investigating security threats, analyzing vulnerabilities, implementing remediation strategies, and supporting incident response in cloud or hybrid environments. Strong technical troubleshooting and analytical problem-solving skills. Experience with scripting and automation using Python, PowerShell, or Bash. Familiarity with infrastructure-as-code technologies such as Terraform or AWS CloudFormation. Preferred Qualifications: Experience securing Google Cloud Platform (GCP) environments, including cloud-native security services and cross-cloud security integrations. Advanced hands-on experience securing Kubernetes clusters, Docker workloads, and AWS Bottlerocket environments. Knowledge of container runtime protection, CI/CD security integrations, and cloud-native application security. Additional expertise in identity security, AI/ML security, SaaS application security, Zero Trust architecture, or Cloud-Native Application Protection Platforms (CNAPP). Relevant professional certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, Certified Kubernetes Security Specialist (CKS), CISSP, or CCSP. Ability to work flexible hours aligned with U.S. time zones, including occasional evening, overnight, or weekend availability. Strong communication and collaboration skills, with the ability to work effectively across geographically distributed technical teams. High levels of initiative, adaptability, professionalism, and commitment to continuous learning. Benefits: Competitive compensation: Attractive salary package, paid twice monthly. Healthcare coverage: Comprehensive medical insurance, with 100% of medical premiums covered by the employer. Retirement savings: 401(k) plan with a 100% company match on the first 4% of eligible contributions. Paid time off: Three weeks of PTO starting from the first year of employment. Paid holidays: 11 paid holidays annually. Family support: Paid maternity and paternity leave. Remote work support: Monthly reimbursement for cell phone and home internet expenses. Professional development: Financial support and investment in training programs and industry certifications to strengthen technical expertise. Business development incentives: Companywide incentive programs rewarding contributions to new business opportunities. Knowledge-sharing incentives: Additional recognition for contributions such as white papers, blog posts, and internal webinars. Work flexibility: Remote, part-time working arrangement within the United States.