cloud security engineer

Chamberlain Group

<div>Chamberlain Group (CG) is a global leader in intelligent access and Blackstone portfolio company. Powered by our myQ technology, we make access simple and secure for millions of homeowners, businesses, and communities worldwide. Our flagship brands, LiftMaster&reg; and Chamberlain&reg; , are found in 51+ million homes, and 14 million+ people rely on the myQ&reg; app daily.

The Cloud Security Senior Engineer is responsible for designing, implementing, and maintaining security controls across AWS and Azure cloud environments. The ideal candidate brings deep hands-on experience securing multi-cloud environments in fast-paced, transformation-driven organizations with the ability to work directly with highly technical teammates.Architect and enforce cloud security controls across AWS and Azure, including IAM policies, network segmentation, encryption, and logging configurations.<ul><li>
Manage and optimize cloud security posture management (CSPM) and cloud workload protection (CWPP) tooling</li><li>
Conduct cloud security assessments, identify misconfigurations, and drive remediation with engineering teams.</li><li>
Design and implement guardrails for Infrastructure-as-Code (IaC) pipelines (Terraform, CloudFormation, Bicep) to prevent insecure deployments</li><li>
Monitor and respond to cloud-specific threats, integrating cloud telemetry into SIEM and detection workflows</li><li>
Evaluate and harden container and serverless architectures (EKS, ECS, Lambda, AKS, Azure Functions).</li><li>
Develop and maintain cloud security standards, reference architectures, and runbooks.</li><li>
Support incident response activities for cloud-based security events.</li><li>
Partner with Engineering, and Application Development teams to embed security into CI/CD pipelines.</li><li>
Provide technical input on cloud security tooling decisions, vendor evaluations, and proof-of-concept testing</li><li>
Stay current on cloud provider security features, emerging threats, and evolving compliance requirements (SOC 2, ISO 27001, NIST CSF, PCI DSS as applicable).</li><li>
Comply with health and safety guidelines and rules; managers should also ensure compliance across their teams.</li><li>
Protect Chamberlain Group&rsquo;s reputation by keeping information confidential.</li><li>
Maintain professional and technical knowledge by attending educational workshops, reading professional publications, establishing personal networks, and participating in professional societies.</li><li>
Contribute to the team effort by accomplishing related results and participating on projects as needed.</li><li>
Motivate and lead a high performance team by attracting, developing, engaging and retaining team members</li><li>
Drive the performance management and compensation processes by communicating job expectations, monitoring and evaluating performance, providing feedback and facilitating employee development per the company&rsquo;s policies</li><li>
Maintain transparent communication by appropriately communicating organization information to team through department meetings, one-on-one meetings, appropriate email, IM and regular interpersonal communications</li><li>
Lead and motivate individuals and teams to create a workplace culture that is consist</li></ul>
Minimum Qualifications
Education/Certifications:
Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
Experience:<ul><li>
7+ years of progressive experience in information security, with at least 4 years focused on cloud security engineering.</li></ul>
Knowledge, Skills, and Abilities:<ul><li>
Deep hands-on experience with both AWS and Microsoft Azure security services, including: AWS: IAM, GuardDuty, Security Hub, CloudTrail, Config, KMS, VPC security, WAF, Organizations/SCPs. Azure: Entra ID, Defender for Cloud, Azure Policy, Key Vault, NSGs, Azure Monitor, Sentinel.</li><li>
Strong experience with cloud security posture management (CSPM) platforms (e.g., Wiz, Orca, Rapid7 InsightCloudSec, CrowdStrike Falcon Cloud Security, or equivalent).</li><li>
Working knowledge of Infrastructure-as-Code (Terraform, CloudFormation, or ARM/Bicep templates) and securing IaC pipelines.</li><li>
Experience with container security (Docker, Kubernetes) and serverless security patterns. Capable of persuading non-security leaders (e.g., IT Ops, Engineering, Product) by linking security initiatives to operational continuity, consumer trust, and compliance posture.</li><li>
Solid understanding of network security principles applied to cloud environments (VPCs, transit gateways, private endpoints, zero trust network architecture).</li><li>
Familiarity with CI/CD security integration and DevSecOps practices.</li><li>
Ability to communicate complex technical concepts to both engineering peers and non-technical stakeholders.</li><li>
Collaborative approach to working across engineering, IT, and product teams.</li></ul>
Other:<ul><li>
Required to be in the office at least three days a week. Monday and Wednesday are mandatory.</li><li>
Ability to manage and monitor major incidents during non-business hours</li></ul>
Preferred Qualifications
Education/Certifications:<ul><li>
AWS Security Specialty, Azure Security Engineer Associate (AZ-500), CCSP, CISSP, or equivalent</li></ul>
Experience:
<ul><li>Experience with cloud detection and response (CDR) tooling and cloud-native threat detection</li></ul>
#LI-Hybrid
#LI-JM2
The pay range for this position is $102,600.00 - $193,425.00; base pay offered may vary depending on a number of factors including, but not limited to, the position offered, location, education, training, and/or experience. In addition to base pay, also offered is a comprehensive benefits package and 401k contribution (all benefits are subject to eligibility requirements). This position is eligible for participation in a short-term incentive plan subject to the terms of the applicable plans and policies.
Chamberlain Group wants all of its employees to succeed and encourages people of all backgrounds to apply. We&rsquo;re proud to be an Equal Opportunity Employer, and you&rsquo;ll be considered for this role regardless of race, color, religion, sex, national origin, age, sexual orientation, ancestry; marital, disabled or veteran status. We&rsquo;re committed to fostering an environment where people of all lived experiences feel welcome.
Persons with disabilities who anticipate needing accommodations for any part of the application process may contact, in confidence Recruiting@Chamberlain.com. 
NOTE: Staffing agencies, headhunters, recruiters, and/or placement agencies, please do not contact our hiring managers directly.</div>

Lead Cloud Security Engineer

BV Teck

<div>Oracle Cloud Security Engineer &ndash; Remote 
 
Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. 
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential. 
 
Job Title: Oracle Cloud Security Engineer 
Location: 100% Remote (U.S.) 
Position Type: Full-time, Direct W2 
Salary Range: $100,000&ndash;$113,000 Annually 
Experience Required: 6+ years 
 
Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position. 
 
Job Summary 
We are seeking an experienced Oracle Cloud Security Engineer responsible for designing, implementing, and operating security controls across Oracle Cloud Infrastructure (OCI), Oracle Cloud Applications, and hybrid Oracle environments. In this role you will define security architecture, harden cloud workloads, manage identity and access, lead vulnerability and compliance programs, and respond to security incidents. The ideal candidate will combine deep technical expertise in OCI security services with strong experience in cloud-native security frameworks, regulatory compliance, and threat detection. In this role you will work closely with cross-functional partners &mdash; product, design, engineering, operations, and business stakeholders &mdash; to translate ambiguous requirements into well-engineered solutions, and will be expected to raise the bar through code review, design review, and mentorship of more junior engineers. The successful candidate brings strong engineering discipline, a clear communication style, and a track record of shipping meaningful work that holds up well in production. 
 
Required Qualifications<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Engineering, or a related discipline.</li><li>
Five or more years of cloud security experience, with strong hands-on time on OCI.</li><li>
Deep experience with OCI Identity, IAM policies, and identity federation.</li><li>
Hands-on experience with OCI Cloud Guard, Security Zones, Vault, and Data Safe.</li><li>
Solid understanding of cloud-native security frameworks and CIS benchmarks.</li><li>
Experience with vulnerability management and patching tooling.</li><li>
Working knowledge of regulatory frameworks (PCI-DSS, HIPAA, SOC 2, ISO 27001).</li><li>
Strong scripting skills (Python, Bash) and Terraform.</li><li>
Experience integrating cloud workloads with SIEM platforms.</li><li>
Excellent troubleshooting, communication, and documentation skills.</li></ul>
Preferred Qualifications<ul><li>
Oracle Cloud Security Professional certification.</li><li>
CISSP, CCSP, or equivalent industry security certifications.</li><li>
Experience with multi-cloud security architectures.</li><li>
Familiarity with SOAR platforms and automated incident response.</li><li>
Exposure to zero-trust architecture patterns.</li></ul>
How to Apply 
Would you like to know more about this opportunity? For immediate consideration, please send your resume to hilda@bvteck.com. Learn more about Bright Vision Technologies at www.bvteck.com. 
Bright Vision Technologies is an Equal Opportunity Employer. 
Equal Employment Opportunity (EEO) Statement
Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.
BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.
B6y5DFl0al</div>

Oracle Cloud Security Engineer

Occam Solutions

<div>Primary Responsibility 
The DevSecOps Engineer shall serve as the lead technical engineer responsible for designing, implementing, securing, automating, and sustaining the cloud infrastructure supporting the Office of Naval Research (ONR) Data &amp; Analytics environment. The DevSecOps Engineer shall lead the implementation and execution of the technical requirements identified in PWS Section 4.5 &ndash; Technical Infrastructure and Platform Support, including infrastructure automation, Continuous Integration/Continuous Deployment (CI/CD), cloud security, container orchestration, Infrastructure-as-Code (IaC), and operational sustainment of the FedRAMP High and DoD Impact Level 5 (IL5) cloud environment. 
The DevSecOps Engineer shall architect and maintain secure cloud infrastructure, automate deployment pipelines, support AI/ML platform integration, implement cloud-native security controls, monitor system health and security events, and ensure compliance with DoD cybersecurity requirements. This position will work closely with software developers, data engineers, cloud architects, cybersecurity personnel, and Government stakeholders to deliver resilient, scalable, and secure cloud services. 
Duties and Responsibilities

The DevSecOps Engineer shall:
<ul>
<li>Design, deploy, automate, and maintain secure cloud infrastructure supporting mission applications and analytics platforms.</li>
<li>Develop, implement, and manage automated CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, or equivalent technologies.</li>
<li>Build and maintain Infrastructure-as-Code (IaC) solutions utilizing Terraform, Ansible, or similar automation frameworks.</li>
<li>Implement and manage containerized application environments using Docker, Kubernetes, or comparable orchestration platforms.</li>
<li>Configure, monitor, and optimize cloud-native security services including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), endpoint protection, and Security Information and Event Management (SIEM) platforms.</li>
<li>Analyze security logs, audit events, vulnerability reports, and SIEM alerts to identify threats, recommend mitigation strategies, and support incident response activities.</li>
<li>Support continuous Authority to Operate (ATO) compliance through configuration management, security patching, vulnerability remediation, and security documentation.</li>
<li>Implement secure API management, identity and access management (IAM), secrets management, encryption, and least-privilege access controls.</li>
<li>Develop automated monitoring, logging, alerting, and operational dashboards to improve system reliability and performance.</li>
<li>Support deployment and operationalization of AI/ML platforms and services, including cloud-native machine learning environments.</li>
<li>Collaborate with software developers, data engineers, and cloud architects to integrate security throughout the software development lifecycle (SDLC).</li>
<li>Ensure cloud infrastructure complies with DoD cybersecurity policies, FedRAMP High requirements, DoD IL5 controls, and applicable security frameworks.</li>
<li>Support system scalability, resilience, disaster recovery, and operational continuity.</li>
<li>Document system architectures, deployment procedures, security configurations, and operational processes.</li></ul> 


Minimum Qualifications

The DevSecOps Engineer shall meet the requirements for the &quot;DevSecOps Engineer &ndash; Intermediate&quot; labor category as defined in the CHESS ITES-3S contract vehicle and possess the following additional qualifications:
<ul>
<li>Seven (7) years of combined experience in DevSecOps, DevOps, SecOps, or MLOps engineering and development.</li>
<li>Five (5) years of hands-on experience designing, securing, implementing, and maintaining cloud environments, preferably within AWS GovCloud, Azure Government, or similarly regulated cloud environments.</li>
<li>Demonstrated experience supporting cloud environments operating under FedRAMP High, DoD Impact Level 5 (IL5), or comparable federal security requirements.</li>
<li>Verifiable experience on at least two (2) projects designing, implementing, and managing Continuous Integration/Continuous Deployment (CI/CD) pipelines using Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions, or equivalent technologies.</li>
<li>Demonstrated expertise implementing and managing containerization and orchestration technologies, including Docker, Kubernetes, OpenShift, or similar platforms.</li>
<li>Hands-on experience implementing Infrastructure-as-Code (IaC) using Terraform, Ansible, CloudFormation, or comparable automation tools.</li>
<li>Experience configuring and administering cloud-native security capabilities including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM), vulnerability management, and cloud security monitoring solutions.</li>
<li>Verifiable experience analyzing security logs, SIEM data, audit records, and threat intelligence to identify vulnerabilities, investigate security events, and implement corrective actions.</li>
<li>Experience implementing secure Identity and Access Management (IAM), encryption, secrets management, and Zero Trust security principles.</li>
<li>Experience supporting automated monitoring, logging, system performance optimization, and operational sustainment of enterprise cloud platforms.</li>
<li>Strong understanding of DevSecOps best practices, secure software development lifecycle (SSDLC), and cloud security architectures.</li> 
</ul>
Qualifications
<ul>
<li>Active Secret security clearance (required).</li>
<li>Current DoD 8140 (or legacy DoD 8570) cybersecurity certification applicable to privileged access functions (e.g., Security+, CySA+, CASP+, CISSP, CCSP).</li>
<li>AWS Certified DevOps Engineer &ndash; Professional, AWS Security Specialty, Azure DevOps Engineer Expert, Certified Kubernetes Administrator (CKA), or comparable cloud certifications.</li>
<li>Experience supporting AI/ML environments, including AWS SageMaker, Azure Machine Learning, or similar platforms.</li>
<li>Experience with streaming data technologies such as Apache Kafka, AWS Kinesis, or equivalent event-driven architectures.</li>
<li>Familiarity with NIST RMF, DISA STIGs, FedRAMP, Zero Trust Architecture, and DoD cybersecurity compliance requirements.</li></ul></div>

DevSecOps Engineer

JCSSolutions

<div>Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! 
 
Job Summary 
JCS Solutions is seeking a highly qualified Hybrid Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) programs Fort Belvoir, VA. The successful candidate will serve as a senior technical contributor responsible for architecting, engineering, implementing, and sustaining secure hybrid cloud solutions across Microsoft Azure and Amazon Web Services (AWS). This position requires both strategic cloud architecture expertise and hands-on engineering experience in designing and deploying modern cloud infrastructure, endpoint management, and security solutions within highly secure enterprise environments. The ideal candidate is an experienced cloud engineer who thrives in fast-paced environments, enjoys solving complex technical challenges, and is capable of developing greenfield cloud solutions while collaborating with cross-functional engineering and cybersecurity teams. This position may also provide technical leadership and mentoring to junior cloud engineers. 
Clearance: Must have Active DoD Top Secret security clearance with eligibility for Sensitive Compartmented Information (SCI) access. 
 
What&rsquo;s in it for you:<ul><li>
Join a premier technology firm specializing in innovative solutions.</li><li>
Be part of a collaborative, inclusive, and innovative work culture.</li><li>
Enjoy tremendous growth potential in a high-performing team environment.</li><li>
A robust benefits package:<ul><li>
Health, dental, and vision insurance</li><li>
Life insurance</li><li>
Short-and-long term disability</li><li>
Paid time off (PTO)</li><li>
401k retirement plan with employer match</li><li>
Annual Professional Development Reimbursement Program</li><li>
And more!</li></ul></li></ul>
 What you will do:<ul><li>
Architect, design, engineer, and implement secure hybrid cloud solutions utilizing Microsoft Azure and AWS.</li><li>
Design and deploy greenfield cloud environments supporting Department of Defense mission requirements.</li><li>
Develop secure, scalable, and resilient cloud architectures aligned with DoD cybersecurity guidance and Zero Trust principles.</li><li>
Design and implement Infrastructure as Code (IaC) solutions utilizing Terraform, Azure Bicep, ARM Templates, CloudFormation, or similar technologies.</li><li>
Design and administer Microsoft Intune, Microsoft Defender for Endpoint, Defender for Server, and Defender for Cloud, Microsoft Purview, and Azure Virtual Desktop (AVD) environments supporting enterprise endpoint management and security.</li><li>
Engineer secure networking solutions integrating on-premises infrastructure with Azure and AWS cloud environments.</li><li>
Implement cloud-native monitoring, logging, backup, disaster recovery, and security services.</li><li>
Automate cloud deployments and operational processes using PowerShell, Python, Azure CLI, AWS CLI, or similar scripting tools.</li><li>
Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutions.</li><li>
Support system accreditation activities and ensure compliance with DoD security policies, NIST guidance, and Risk Management Framework (RMF) requirements.</li><li>
Evaluate emerging cloud technologies and recommend innovative technical solutions supporting mission objectives.</li><li>
Provide technical mentorship and guidance to junior engineers and support technical leadership responsibilities as required.</li></ul>
What you will bring:<ul><li>
Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline with 12+ years of relevant experience. Additional experience may be considered in lieu of a degree.</li><li>
Active DoD Top Secret security clearance with eligibility for Sensitive Compartmented Information (SCI) access.</li><li>
Current DoD 8570/8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).</li><li>
Microsoft Certified: Azure Solutions Architect Expert certification.</li><li>
Minimum of five (5) years of experience architecting and implementing enterprise cloud solutions.</li><li>
Extensive experience designing and deploying Microsoft Azure infrastructure and platform services.</li><li>
Demonstrated experience architecting hybrid cloud environments integrating on-premises infrastructure with Microsoft Azure and AWS.</li><li>
Hands-on experience implementing and administering:<ul><li>
Microsoft Intune* Microsoft Defender for Endpoint* Microsoft Purview* Azure Virtual Desktop (AVD)</li><li>
Experience managing enterprise endpoint security, device compliance, application deployment, endpoint configuration, data governance, information protection, and Data Loss Prevention (DLP).</li><li>
Experience with Infrastructure as Code (Terraform, Azure Bicep, ARM Templates, CloudFormation, or equivalent).</li><li>
Experience automating cloud administration through PowerShell, Python, Bash, Azure CLI, and/or AWS CLI.</li><li>
Strong understanding of cloud networking, enterprise security, Zero Trust architecture, NIST cybersecurity guidance, and RMF.</li><li>
Excellent written and verbal communication skills.</li><li>
Ability to work effectively within dynamic, mission-focused engineering organizations.</li><li>
Familiarization with cloud connected endpoints, remote users, virtual devices, and non-persistent endpoints.</li></ul></li></ul>
How will you wow us:<ul><li>
AWS Certified Solutions Architect &ndash; Professional certification.</li><li>
Additional AWS Professional or Specialty certifications.</li><li>
Experience supporting Department of Defense cloud modernization initiatives.</li><li>
Familiarity with the Department of Defense Joint Warfighting Cloud Capability (JWCC), DoD Joint Tenant environments, or other enterprise cloud initiatives.</li><li>
Understanding of the DoD Enterprise Cloud Strategy and cloud adoption across the Joint Force.</li><li>
Familiarization with Trellix and Tanium in on-prem environments.</li><li>
Experience supporting Zero Trust implementation initiatives within DoD environments.</li><li>
Experience with Windows 365 Cloud PC.</li><li>
Experience with Kubernetes, Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), or Red Hat OpenShift.</li><li>
Experience with Azure Arc or other hybrid cloud management platforms.</li><li>
Familiarity with DevSecOps methodologies and CI/CD automation pipelines.</li><li>
Previous experience serving as a technical lead or mentoring cloud engineering teams.</li></ul> 
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers&rsquo; mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. 
 
JCS is both a Great Place to Work and a Top Places to Work certified company. 
 
Our employees embody our core values, and we are looking for others who do too!<ul><li>
Customer Experience: Strive for excellence and delight our clients</li><li>
Innovation: Embrace creative thinking to enable continual growth and powerful solutions</li><li>
Accountability: Take ownership of and pride in our actions and service delivery</li><li>
Inspire: Be inspired to be your best self and have fun in the process</li><li>
Integrity: Do the right thing, the right way, every time!</li><li>
Stewardship: The careful and responsible management of something entrusted to our care.</li></ul> 
At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $96,000 - $105,000. 
 
Commitment to Non-Discrimination
 
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. 
 
 
NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.
tUpizUxHbY</div>

Hybrid Multi-Cloud Engineer SME (Azure/Endpoint Management)

QNBeyond Plus

<div>
 
 We are looking for a
 
 DevSecOps Security Engineer
 
 to integrate security practices throughout the software development lifecycle and ensure secure delivery of digital banking services.
 
 
 Key Responsibilities
 
 <ul>
 <li>
 Implement security controls within CI/CD pipelines.
 </li>
 <li>
 Manage SAST, DAST, and security scanning solutions.
 </li>
 <li>
 Conduct vulnerability assessments.
 </li>
 <li>
 Support cloud and container security.
 </li>
 <li>
 Collaborate with engineering teams on secure coding practices.
 </li>
 </ul>
 
 Required Qualifications
 
 <ul>
 <li>
 4+ years cybersecurity experience.
 </li>
 <li>
 DevSecOps implementation experience.
 </li>
 <li>
 Cloud security expertise.
 </li>
 <li>
 OWASP and application security knowledge.
 </li>
 </ul>
</div>

DevSecOps Security Engineer

Digital Global Connectors

<div>Vulnerability Management Engineer 
Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time 
Position Summary 
Digital Global Connectors (DGC) is seeking an experienced Vulnerability Management Engineer to support a Federal information security program. The Vulnerability Management Engineer is responsible for identifying, assessing, prioritizing, tracking, and supporting the remediation of security vulnerabilities across enterprise information systems, cloud environments, applications, databases, network infrastructure, and endpoint devices.

This position performs enterprise vulnerability assessments, validates remediation efforts, supports continuous monitoring activities, and works closely with Security Engineers, ISSOs, System Administrators, Cloud Engineers, Security Operations Center (SOC) personnel, and program leadership to reduce organizational cyber risk and strengthen the overall cybersecurity posture.

The successful candidate will possess extensive experience administering enterprise vulnerability management platforms, performing technical vulnerability assessments, and implementing risk-based remediation strategies within large enterprise environments. 
Essential Duties and Responsibilities: 
Enterprise Vulnerability Assessments
<ul>
<li>Conduct enterprise vulnerability assessments across servers, workstations, databases, network infrastructure, cloud environments, applications, and endpoint devices.</li>
<li>Perform authenticated and unauthenticated vulnerability scans.</li>
<li>Analyze vulnerability assessment results to determine severity and organizational impact.</li>
<li>Validate scan accuracy and eliminate false positives.</li>
<li>Identify systemic security weaknesses and recurring vulnerabilities.</li>
<li>Maintain vulnerability assessment schedules supporting continuous monitoring activities.</li>
</ul>
Vulnerability Management
<ul>
<li>Prioritize vulnerabilities using risk-based methodologies.</li>
<li>Coordinate remediation activities with System Administrators, Cloud Engineers, Security Engineers, and System Owners.</li>
<li>Track remediation progress through completion.</li>
<li>Validate successful remediation of identified vulnerabilities.</li>
<li>Recommend mitigation strategies when immediate remediation is not feasible.</li>
<li>Monitor aging vulnerabilities and escalation thresholds.</li>
</ul>
Security Configuration Compliance
<ul>
<li>Assess compliance with DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Microsoft Security Baselines, and organizational configuration standards.</li>
<li>Identify configuration weaknesses affecting system security.</li>
<li>Recommend secure configuration improvements.</li>
<li>Validate implementation of security hardening recommendations.</li>
<li>Support configuration compliance reporting.</li>
<li>Assist technical teams with remediation planning.</li>
</ul>
Vulnerability Assessment Tools

Administer and operate enterprise vulnerability management technologies including:
<ul>
<li>Tenable Security Center</li>
<li>Nessus Manager</li>
<li>Nessus Professional</li>
<li>Nessus Agents</li>
<li>Microsoft Defender Vulnerability Management</li>
<li>Qualys VMDR</li>
<li>Rapid7 InsightVM</li>
<li>Microsoft Defender for Cloud</li>
<li>AWS Inspector</li>
<li>Azure Security Center</li>
<li>Security Content Automation Protocol (SCAP) tools</li>
</ul>
Maintain vulnerability scanning infrastructure and ensure scanning activities are performed efficiently and accurately.

Cloud Vulnerability Management
<ul>
<li>Perform vulnerability assessments across Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.</li>
<li>Assess cloud resource configurations for security weaknesses.</li>
<li>Identify cloud misconfigurations and excessive permissions.</li>
<li>Validate cloud security posture following remediation.</li>
<li>Support cloud compliance initiatives.</li>
<li>Recommend improvements to cloud vulnerability management processes.</li>
</ul>
Risk Management Framework (RMF) Support
<ul>
<li>Support implementation of NIST SP 800-53 security controls related to vulnerability management.</li>
<li>Provide technical evidence supporting Authorization to Operate (ATO) activities.</li>
<li>Assist ISSOs and Security Assessors during Security Control Assessments (SCAs).</li>
<li>Validate remediation of technical findings identified during security assessments.</li>
<li>Support continuous monitoring reporting requirements.</li>
<li>Maintain documentation supporting RMF activities.</li>
</ul>
Reporting and Metrics

Develop and maintain:
<ul>
<li>Vulnerability Assessment Reports</li>
<li>Executive Vulnerability Dashboards</li>
<li>Remediation Status Reports</li>
<li>POA&amp;M Support Documentation</li>
<li>Vulnerability Trend Reports</li>
<li>Security Metrics</li>
<li>Compliance Reports</li>
<li>Continuous Monitoring Reports</li>
<li>Risk Assessments</li>
<li>Standard Operating Procedures</li>
</ul>
Ensure reporting accurately reflects enterprise vulnerability status and supports executive decision-making.

Collaboration
<ul>
<li>Coordinate with Security Engineers, ISSOs, System Administrators, Cloud Engineers, SOC Analysts, Threat Hunters, Security Assessors, and Government stakeholders.</li>
<li>Participate in vulnerability review meetings.</li>
<li>Provide technical guidance regarding vulnerability remediation priorities.</li>
<li>Support enterprise cybersecurity initiatives and security assessments.</li>
<li>Assist with troubleshooting vulnerability scanning issues.</li>
</ul>
Continuous Improvement
<ul>
<li>Monitor emerging vulnerabilities, Common Vulnerabilities and Exposures (CVEs), Common Weakness Enumerations (CWEs), and evolving attack techniques.</li>
<li>Evaluate new vulnerability management technologies.</li>
<li>Recommend improvements to enterprise vulnerability management processes.</li>
<li>Support automation initiatives that improve vulnerability detection and remediation.</li>
<li>Maintain professional certifications and technical expertise.</li></ul> 


Minimum Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.</li>
<li>Minimum four (4) years of experience performing enterprise vulnerability management or vulnerability assessment activities.</li>
<li>Experience administering Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or comparable enterprise vulnerability management platforms.</li>
<li>Experience supporting Windows, Linux, network, cloud, and hybrid environments.</li>
<li>Familiarity with NIST SP 800-53, the Risk Management Framework (RMF), and Federal cybersecurity requirements.</li>
<li>Strong analytical, troubleshooting, documentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul> 


Preferred Qualifications
<ul>
<li>Master's degree in Cybersecurity, Information Assurance, Computer Science, Engineering, or a related discipline.</li>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience supporting Microsoft Azure, Microsoft 365, or AWS cloud environments.</li>
<li>Experience implementing Security Content Automation Protocol (SCAP) compliance tools.</li>
<li>Tenable Certified Nessus Expert</li>
<li>CompTIA CySA+</li>
<li>CompTIA Security+</li>
<li>GIAC Continuous Monitoring Certification (GMON)</li>
<li>Certified Information Systems Security Professional (CISSP) (preferred)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500) (preferred)</li></ul> 


Knowledge, Skills, and Abilities
<ul>
<li>Vulnerability Management</li>
<li>Vulnerability Assessments</li>
<li>Risk-Based Vulnerability Prioritization</li>
<li>Tenable Security Center</li>
<li>Nessus</li>
<li>Microsoft Defender Vulnerability Management</li>
<li>Qualys VMDR</li>
<li>Rapid7 InsightVM</li>
<li>Microsoft Defender for Cloud</li>
<li>AWS Inspector</li>
<li>Azure Security Center</li>
<li>DISA STIGs</li>
<li>CIS Benchmarks</li>
<li>Security Configuration Compliance</li>
<li>Security Content Automation Protocol (SCAP)</li>
<li>Windows Security</li>
<li>Linux Security</li>
<li>Cloud Security</li>
<li>Microsoft Azure</li>
<li>Amazon Web Services (AWS)</li>
<li>Risk Management Framework (RMF)</li>
<li>NIST SP 800-53</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>Common Vulnerabilities and Exposures (CVEs)</li>
<li>Common Weakness Enumeration (CWE)</li>
<li>POA&amp;M Management</li>
<li>Technical Documentation</li>
<li>Microsoft Office Suite</li>
<li>ServiceNow</li>
<li>Jira</li></ul> 


Security Requirements
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support enterprise vulnerability management operations, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.</li>
<li>Must maintain strict confidentiality while handling vulnerability assessment data, system configurations, compliance findings, remediation information, and Federal information systems.</li>
<li>Ability to identify, assess, prioritize, and support remediation of enterprise vulnerabilities while collaborating with Government stakeholders, technical teams, and program leadership to reduce organizational cyber risk and improve the security posture of enterprise information systems.</li></ul></div>

Vulnerability Management Engineer

<div>Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! 
 
Job Summary 
JCS Solutions is seeking a Hybrid Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) cloud modernization initiatives in Fort Belvoir, VA or Albuquerque, New Mexico. This position is responsible for the architecture, engineering, implementation, and sustainment of secure hybrid cloud solutions across Microsoft Azure and Amazon Web Services (AWS) environments.
 
The successful candidate will serve as a senior technical contributor responsible for designing and delivering enterprise cloud capabilities in a fast-paced, green-field environment supporting national security missions. This role requires both strategic cloud architecture expertise and hands-on engineering experience implementing secure, scalable, and resilient cloud solutions. The selected candidate will collaborate with systems engineers, cybersecurity professionals, network engineers, and application teams to develop cloud architectures that align with DoD enterprise cloud strategies and Zero Trust objectives. This position may also provide technical leadership and mentorship to junior cloud engineers. 
Clearance: Active DoD Top Secret security clearance with SCI eligibility. 
 
What&rsquo;s in it for you:<ul><li>
Join a premier technology firm specializing in innovative solutions.</li><li>
Be part of a collaborative, inclusive, and innovative work culture.</li><li>
Enjoy tremendous growth potential in a high-performing team environment.</li><li>
A robust benefits package:<ul><li>
Health, dental, and vision insurance</li><li>
Life insurance</li><li>
Short-and-long term disability</li><li>
Paid time off (PTO)</li><li>
401k retirement plan with employer match</li><li>
Annual Professional Development Reimbursement Program</li><li>
And more!</li></ul></li></ul>
 
 What you will do:<ul><li>
Architect, design, engineer, and deploy secure hybrid cloud solutions utilizing Microsoft Azure and AWS.</li><li>
Design enterprise cloud architectures supporting mission-critical DoD systems and applications.</li><li>
Lead technical implementation of cloud modernization initiatives from concept through production deployment.</li><li>
Develop green-field cloud environments using industry best practices for security, scalability, resilience, and automation.</li><li>
Implement Infrastructure as Code (IaC) using Terraform, Azure Bicep, ARM Templates, CloudFormation, or equivalent technologies.</li><li>
Engineer cloud networking solutions integrating on-premises infrastructure with Azure and AWS.</li><li>
Deploy cloud-native security capabilities, monitoring, logging, backup, disaster recovery, and operational management solutions.</li><li>
Implement automation using PowerShell, Azure CLI, AWS CLI, Python, or similar scripting languages.</li><li>
Collaborate with cybersecurity and engineering teams to ensure compliance with DoD security requirements and accreditation standards.</li><li>
Support development of cloud roadmaps and technical strategies that advance enterprise cloud adoption.</li><li>
Evaluate emerging cloud technologies and recommend innovative technical solutions.</li><li>
Provide technical guidance, mentorship, and leadership to cloud engineering team members as required.</li></ul> 

What you will bring:<ul><li>
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical discipline with 12+ years of relevant experience; additional experience may be considered in lieu of a degree.</li><li>
Active DoD Top Secret security clearance with SCI eligibility.</li><li>
Current DoD 8570/8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).</li><li>
Current Microsoft Certified: Azure Solutions Architect Expert certification.</li><li>
Minimum of five years of experience architecting and implementing Microsoft Azure cloud solutions.</li><li>
Demonstrated experience designing hybrid cloud environments integrating on-premises infrastructure with Azure.</li><li>
Strong hands-on experience deploying Azure compute, networking, storage, security, identity, and management services.</li><li>
Experience engineering identity, authorization, and access control solutions including Entra ID and Enterprise ICAM.</li><li>
Strong working knowledge of cloud security principles, Zero Trust concepts, and NIST cybersecurity guidance. This includes integration with SIEM/SOAR (Microsoft Sentinel and Defender XDR), enabling Zero Trust policy and governance across the multi-cloud environment, and implementation of ZT architecture leveraging Microsoft and common DoD technologies. This includes working knowledge of comply-to-connect, Zero Trust Network Access, Role- and Attribute- Based Access Controls (RBAC/ABAC),</li><li>
Working knowledge of Purview or similar data governance platforms.</li><li>
Experience implementing Infrastructure as Code and cloud automation.</li><li>
Experience with PowerShell, Azure CLI, Python, or comparable scripting languages.</li><li>
Excellent analytical, communication, and technical documentation skills.</li><li>
Ability to work effectively in a dynamic, mission-focused environment.</li></ul> 

How will you wow us:<ul><li>
AWS Certified Solutions Architect &ndash; Professional certification.</li><li>
Experience architecting and implementing enterprise AWS environments.</li><li>
Familiarity with Department of Defense enterprise cloud initiatives, including the DoD Joint Tenant and Joint Warfighting Cloud Capability (JWCC).</li><li>
Understanding of the role cloud technologies play in implementing the DoD Zero Trust Strategy.</li><li>
Experience with Kubernetes, Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), or Red Hat OpenShift.</li><li>
Experience with Azure Arc or other hybrid cloud management platforms.</li><li>
Familiarity with DevSecOps methodologies and CI/CD pipelines.</li><li>
Experience leading technical teams or serving as a senior technical lead on cloud engineering projects.</li></ul> 
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers&rsquo; mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. 
 
JCS is both a Great Place to Work and a Top Places to Work certified company. 
 
Our employees embody our core values, and we are looking for others who do too!<ul><li>
Customer Experience: Strive for excellence and delight our clients</li><li>
Innovation: Embrace creative thinking to enable continual growth and powerful solutions</li><li>
Accountability: Take ownership of and pride in our actions and service delivery</li><li>
Inspire: Be inspired to be your best self and have fun in the process</li><li>
Integrity: Do the right thing, the right way, every time!</li><li>
Stewardship: The careful and responsible management of something entrusted to our care.</li></ul> 
At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $159,000 - $173,000. 
 
Commitment to Non-Discrimination
 
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. 
 
NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.
WfGXCA55Af</div>

Hybrid Multi-Cloud Engineer SME

Search 5296+ Cloud security engineer jobs near you this August. New roles added regularly across leading industries. Apply today.