Senior Cloud Security Engineer

Job Title: Senior Cloud Security Engineer

Job Location: Mechanicsville, VA

Job Type: Contract

Pay Range: $90.00hr - $95.00hr

Job Overview:

The Senior Cloud Security Engineer serves as a subject matter expert supporting the organization s enterprise Azure migration. This role is responsible for architecting, implementing, securing, monitoring, and continuously improving cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks. The position provides senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance while working closely with cross-functional engineering, infrastructure, and IT leadership teams.

Key Responsibilities:

• Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions.
• Lead complex cloud security initiatives and provide technical direction to engineers, while assisting in the design of secure cloud architecture for complex enterprise environments.
• Influence architecture and security decisions, prevent insecure configurations from reaching production, and implement security gates within deployment pipelines.
• Explain complex security risks to non-technical stakeholders.
• Assess cloud security risks and security gaps, recommend appropriate remediations, create and maintain security documentation and evidence, and support audits and assessments.
• Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
• Develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as create Azure Automation runbooks to support incident response workflows.
• Monitor security events using SIEM technologies and work with the security operations center team to coordinate incident response activities.
• Identify and diagnose system problems and threats using system logs, line monitors, SIEM, diagnostic software, and test equipment.
• Lead the investigation and containment of cloud security incidents.
• Review firewall and Network Security Group (NSG) rule requests to ensure compliance with security standards.
• Provide documentation, architecture topology diagrams, IP schemes, and access controls when required.
• Work independently on assigned projects.

Required Skills and Experience:

• 8+ years of enterprise cloud experience.
• 5+ years of enterprise cloud security experience.
• Strong hands-on expertise in cloud infrastructure and cloud engineering as a cloud security professional.
• Deep cloud engineering competency in cybersecurity, networking, identity, and security operations.
• In-depth experience transitioning between strategic architecture and hands-on engineering while identifying security risks.
• In-depth experience designing practical solutions, implementing controls, and collaborating with infrastructure teams.
• In-depth experience working with application teams to continuously improve the organization s cloud security posture.
• Experience setting up Network Security Groups (NSGs), resource manager, management groups, monitors, and log analytics.
• Experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks, and network segmentation.
• Experience in incident response, security investigations, log analysis, threat intelligence, security monitoring, and IOC analysis.
• Experience coordinating activities during cyber incidents.
• Experience in vulnerability management, remediation tracking, and utilizing vulnerability scanning tools such as Nessus, Tenable, and Defender.
• Experience securing enterprise cloud environments and implementing security controls in production environments.
• Experience with SIEM products such as Splunk, Microsoft Sentinel, and CNAPP.
• Experience with log management, security analytics, SOC integration, threat detection, and threat hunting.
• Hands-on expertise validating indexer parsers and leveraging Splunk Query Language for monitoring and data analysis.
• Experience collaborating with security governance teams and application leads to implement enterprise log management standards.
• Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles.
• Experience in cloud vulnerability management, remediation tracking, risk assessment, and prioritization.
• Experience in cloud risk assessment, attack surface management, and Cloud Security Posture Management (CSPM).
• Experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP).
• Experience developing Azure Policy to enforce standardization and compliance with enterprise requirements.
• Experience creating Azure Automation runbooks to support incident response workflows.
• Experience with Identity and Access Management (IAM), Role-Based Access Control (RBAC), and Privileged Access Management (PAM).
• Experience with least-privilege access and multi-factor authentication.
• Experience working in highly regulated environments with large government agencies or similar regulatory environments.
• Ability to communicate technical issues to technical, non-technical, and executive audiences.
• Ability to mentor junior engineers.

Certifications:

• Required: Azure Security Engineer Associate, Security+, or Certified Cloud Security Professional (CCSP) certifications.
• Preferred: Certified Cloud Security Professional (CCSP) or Designing Microsoft Azure Infrastructure (AZ-305).

====

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities