Cyber Security Engineer (Cloud Security)

Accountabilities

In this role, you will strengthen cloud security operations, protect critical infrastructure, and ensure compliance with relevant security and regulatory standards. Your main responsibilities will include:

• Manage and secure cloud infrastructure and cloud-based applications, primarily within Microsoft Azure environments.

• Protect containerized workloads and Kubernetes environments, including Azure Kubernetes Service (AKS), through network policies, workload identity controls, runtime protection, and container image scanning.

• Own and continuously improve Cloud Security Posture Management (CSPM), identifying and remediating configuration weaknesses across cloud environments.

• Secure infrastructure-as-code orchestration platforms, including Terraform and OpenTofu, by implementing access controls, secrets management, and deployment approval workflows.

• Manage identity and access security through Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.

• Review network architectures and proposed connectivity changes, providing security recommendations on network segmentation, sensitive data flows, and firewall controls.

• Collaborate with IT and Site Reliability Engineering (SRE) teams to investigate and resolve network security concerns.

• Administer Zero Trust network access and edge security solutions to protect access to corporate and cloud resources.

• Manage broader enterprise security solutions, including SIEM, Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), and vulnerability management tools.

• Monitor security alerts, investigate potential threats, respond to incidents, and participate in the security incident response on-call rotation.

• Conduct threat analyses, vulnerability assessments, and risk evaluations, documenting findings, coordinating remediation efforts, and reporting progress to leadership.

• Develop queries, scripts, integrations, and automated workflows to improve cloud security operations and operational efficiency.

• Partner with development teams to integrate security practices into the Software Development Lifecycle (SDLC) and CI/CD pipelines.

• Perform regular cloud configuration and access reviews to maintain compliance with established security standards.

• Participate in security audits and assessments, supporting governance, risk management, and compliance (GRC) initiatives.

Requirements

The ideal candidate is a hands-on cloud security professional with extensive experience protecting modern cloud environments, containerized applications, and enterprise infrastructure. You should bring the following qualifications and technical capabilities:

• Bachelor's degree in Information Security, Computer Science, or a related field preferred; equivalent professional experience will also be considered.

• At least 5 years of experience in cloud security engineering or a closely related role.

• Extensive hands-on experience securing cloud infrastructure and cloud-based applications, preferably in Microsoft Azure; AWS experience is an advantage.

• Strong network security expertise, including network architecture, connectivity, segmentation, and firewall management.

• Practical experience securing containerized workloads and Kubernetes environments, particularly AKS, including network policies, workload identities, and runtime protection.

• Experience with Cloud Security Posture Management (CSPM) tools and remediation of cloud misconfigurations.

• Experience securing infrastructure-as-code platforms and deployment pipelines, particularly Terraform or OpenTofu.

• Strong knowledge of Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time privileged access.

• Experience implementing Zero Trust and Secure Access Service Edge (SASE) solutions, such as Cloudflare Zero Trust, WAF, and Gateway, or equivalent technologies.

• Familiarity with security frameworks such as NIST, ISO 27001, and CIS, as well as compliance frameworks including HITRUST and PCI DSS.

• Proven ability to perform security assessments, manage vulnerabilities, investigate threats, and support incident response activities.

• Strong understanding of Windows and Linux operating systems and endpoint security practices.

• Relevant professional certifications such as CISSP, SSCP, Security+, or Azure/AWS cloud security certifications are preferred.

• Strong analytical and problem-solving skills, with the ability to take ownership of security initiatives and drive them through completion.

• Excellent communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.

• Adaptability, curiosity, and a commitment to continuous learning and staying current with emerging security technologies and threats.

Additional qualifications considered an advantage include:

• Familiarity with GitOps tools such as Argo and Flux for secure Kubernetes deployments.

• Previous experience in Network Engineering or Systems Engineering.

• Knowledge of programming and scripting languages.

• Experience working in healthcare technology or other regulated environments.

Benefits

• Competitive annual salary ranging from $110,000 to $130,000.

• Employer-sponsored medical, dental, and vision insurance.

• Life and disability insurance coverage.

• Retirement savings plan with employer contributions.

• Annual company profit-sharing program.

• Dedicated budget for professional development and technical training.

• Open and collaborative working environment.

• Structured two-week onboarding program to support a smooth transition into the role.

• Comprehensive mentorship program to encourage professional growth and development.

• Fully remote working arrangement.