The Cloud Security Engineer - Remote

Position Summary
The Cloud Security Engineer is responsible for implementing, operating, and improving cloud security capabilities across the organization s cloud and SaaS environments. This role focuses on strengthening visibility, posture management, and threat detection within cloud infrastructure, cloud-native applications, and SaaS platforms.

The Cloud Security Engineer will support security initiatives involving cloud security posture management (CSPM), cloud-native application protection (CNAPP), SaaS security posture management (SSPM), and cloud workload protection. This includes working with tools such as Wiz Code, Wiz Defend, CrowdStrike Falcon Shield (SSPM), and related platforms to identify risk, improve security coverage, and integrate security controls into development and cloud operations workflows.
The role requires collaboration with engineering, DevOps, platform teams, and security operations to ensure cloud deployments follow secure configuration standards and security findings are effectively prioritized and remediated.

Key Responsibilities
Cloud Security Posture Management
Support the implementation and operation of cloud security posture management (CSPM) and cloud-native application protection platform (CNAPP) technologies.
Monitor and analyze security findings from platforms such as Wiz Code and Wiz Defend to identify misconfigurations, vulnerabilities, and exposure risks.
Work with engineering and infrastructure teams to remediate cloud security findings and reduce risk across cloud environments.
Develop and maintain security baselines for cloud services and infrastructure.
SaaS Security Posture Management
Support the implementation and management of SaaS security posture management (SSPM) capabilities using platforms such as CrowdStrike Falcon Shield.
Identify and remediate risky SaaS configurations, permission issues, and data exposure risks.
Collaborate with application owners to enforce SaaS security standards and improve identity and access controls.
Cloud Threat Detection & Investigation
Assist with the investigation of suspicious activity within cloud environments using telemetry from security platforms and logging systems.
Support detection engineering by helping refine alerts and security policies within cloud security tools.
Work closely with Security Operations to triage and investigate cloud-related security events.
Secure Development & DevSecOps Integration
Integrate security tooling into development workflows and CI/CD pipelines where appropriate.
Support development teams in identifying and addressing security risks in cloud-native applications.
Assist with scanning infrastructure-as-code and application dependencies for security issues using platforms such as Wiz Code.
Security Automation & Engineering
Develop scripts or automation to improve cloud security visibility, reporting, and remediation workflows.
Assist with integration of cloud security tools into existing monitoring and ticketing systems.
Support the development of dashboards and reporting that communicate cloud security risk and remediation progress.
Cross-Team Collaboration
Work with cloud platform teams to improve secure deployment practices and infrastructure configurations.
Support security architecture initiatives related to cloud adoption and modernization.
Participate in security design reviews for new cloud applications or services.

Required Qualifications
Bachelor s degree in Computer Science, Information Security, Engineering, or related field (or equivalent experience).
2-5 years of experience in cloud security, security engineering, or cloud infrastructure roles.
Hands-on experience with cloud environments such as:
oAWS
oMicrosoft Azure
oGoogle Cloud Platform (Google Cloud Platform)
Experience working with cloud security platforms such as:
oWiz (Code / Defend)
oCrowdStrike Falcon Shield or other SSPM tools
oCSPM, CNAPP, or workload protection platforms.
Understanding of:
oCloud identity and access management
oInfrastructure-as-code security
oCloud networking and segmentation
oContainer and Kubernetes security concepts.
Familiarity with scripting or automation languages such as:
oPython
oBash
oPowerShell
Working knowledge of security frameworks and best practices such as NIST CSF, CIS Benchmarks, and OWASP.

Preferred Qualifications
Experience securing large-scale multi-cloud environments.
Experience integrating security tooling into DevOps or CI/CD pipelines.
Familiarity with container security platforms and Kubernetes environments.
Experience supporting SaaS security initiatives and identity governance programs.
Relevant certifications such as:
oCertified Cloud Security Professional (CCSP)
oAWS Security Specialty
CISSP