Cloud Security Engineer - part-time (R-00250)

Position Overview

True Zero Technologies is seeking an experienced Cloud Security Engineer to support the design, implementation, monitoring, and continuous improvement of security capabilities across enterprise cloud environments in a part-time capacity. The ideal candidate will have strong hands-on experience securing Amazon Web Services (AWS) and Microsoft Azure environments, with additional exposure to Google Cloud Platform (GCP).

This role requires a technically proficient engineer with experience deploying and managing cloud security solutions, integrating security monitoring and threat detection tools, and securing containerized infrastructure. The successful candidate will collaborate with security operations, cloud engineering, and infrastructure teams to strengthen security posture, identify vulnerabilities, automate security controls, and respond to emerging threats.

Key Responsibilities

Cloud Security Engineering: Design, implement, and maintain security controls across AWS and Azure environments, with additional support for GCP, ensuring secure configurations, access controls, and alignment with industry security best practices.
Security Tool Implementation and Integration: Deploy, configure, optimize, and maintain security technologies including CrowdStrike, Splunk, Rapid7, and Red Canary to support endpoint protection, threat detection, vulnerability management, and security monitoring.
Threat Detection and Incident Response: Investigate security alerts, analyze cloud infrastructure threats, support incident response activities, and develop remediation strategies to reduce organizational risk across cloud environments.
Container and Infrastructure Security: Implement security controls for containerized environments using Kubernetes, Docker, and AWS Bottlerocket, including container hardening, vulnerability assessments, runtime protection, and secure deployment practices.
Vulnerability Management and Security Automation: Identify, prioritize, and remediate cloud security vulnerabilities, automate repetitive security operations, and develop scripts or workflows to improve security efficiency and reduce manual intervention.
Cross-Functional Security Collaboration: Partner with cloud architects, DevOps, infrastructure engineers, and security operations teams to integrate security into cloud deployments, support security assessments, and continuously improve enterprise security posture.

Position Requirements

Cloud Security Experience: 3+ years of hands-on experience in cloud security, cybersecurity engineering, or infrastructure security, with demonstrated experience securing AWS and/or Microsoft Azure environments.
Cloud Security Platforms: Strong knowledge of AWS and Azure security services, identity and access management (IAM), network security, logging, encryption, and cloud security configuration best practices.
Security Tools: Practical experience deploying, administering, integrating, or troubleshooting one or more enterprise security platforms, preferably CrowdStrike, Splunk, Rapid7, or Red Canary.
Container Security: Working knowledge of Kubernetes, Docker, and container security concepts, including vulnerability scanning, workload protection, and secure container configuration.
Threat and Vulnerability Management: Experience identifying and investigating security threats, analyzing vulnerabilities, implementing remediation measures, and supporting incident response within cloud or hybrid environments.
Technical Troubleshooting and Automation: Strong troubleshooting skills and experience with scripting or automation using Python, PowerShell, Bash, or infrastructure-as-code technologies such as Terraform or CloudFormation.
Preferred Qualifications
Multi-Cloud Experience: Experience securing Google Cloud Platform (GCP) environments in addition to AWS and Azure, including cloud-native security services and cross-cloud security integrations.
Advanced Container and Cloud-Native Security: Hands-on experience securing Kubernetes clusters, Docker workloads, and AWS Bottlerocket environments, including container runtime security and CI/CD security integrations.
Specialized Security Experience: Additional experience with identity security, AI/ML security, SaaS application security, Zero Trust architecture, or cloud-native application protection platforms (CNAPP).
Professional Certifications: Relevant certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, Certified Kubernetes Security Specialist (CKS), CISSP, CCSP, or equivalent cloud/security credentials.
Work Schedule and Availability
Ability to support flexible working hours aligned with U.S time zones.
Availability for occasional evening, overnight, or weekend coverage as required by operational needs, security incidents, or project deliverables.
Ability to collaborate effectively with geographically distributed engineering and security operations teams.