cloud security engineer

Apex Technology

<div>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions. 
 
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
 
 
The candidate must hold an active Secret clearance (TS/SCI preferred) and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.<h1 class="jobSectionHeader">
Responsibilities:
</h1><ul><li>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</li><li>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</li><li>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</li><li>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</li><li>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous 
monitoring of cloud resources.</li><li>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</li><li>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</li><li>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</li><li>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or 
modernization initiatives.</li><li>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools, 
processes, and best practices.</li><li>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</li><li>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</li><li>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</li><li>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</li><li>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</li><li>
Ability to be on-site 5 days a week at our office Playa Vista.
</li></ul><h1 class="jobSectionHeader">Requirements:</h1><ul><li>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</li><li>
Must be a U.S. citizen.</li><li>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</li><li>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</li><li>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments. 
 
<h1 class="jobSectionHeader">Technical Skills:</h1><ul><li>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</li><li>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</li><li>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</li><li>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</li><li>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</li></ul></li><li>
Additional Certifications:
<ul><li>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</li></ul></li></ul><h1 class="jobSectionHeader">
Why Join Apex?</h1>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.<h2 class="jobSectionHeader">
What We Offer For Full-time Employees:</h2><ul><li>
Shared upside: Receive equity in Apex, letting you benefit from the work you create</li><li>
Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</li><li>
Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</li><li>
Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%</li><li>
8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel</li><li>
Daily catered lunch and unlimited snacks to keep you fueled throughout the day</li><li>
Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</li><li>
Your dream desk setup and all the tools you need to be your most productive self</li><li>
World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</li><li>
Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</li></ul>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.<h1 class="jobSectionHeader">
Equal Opportunity Employer</h1>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.
Compensation Range: $120K - $170K</div>

Cloud Security Engineer

Booz Allen Hamilton

<div>Cloud Security Engineer
The Opportunity:
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.
You Have:<ul><li>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</li><li>
4+ years of experience with secure IT architecture and computing hardware and software</li><li>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</li><li>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</li><li>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</li><li>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</li><li>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</li></ul>
Nice If You Have:<ul><li>
Experience assessing and authorizing network connections between on-premise and cloud</li><li>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</li><li>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</li><li>
Experience with code management tools such as Git or GitLab in a team setting</li><li>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</li><li>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</li><li>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</li><li>
Ability to work independently and as an integrated member of a project team</li><li>
Possession of excellent verbal and written communication skills</li><li>
TS/SCI clearance</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Hex Technologies

SF, NYC, or Remote (USA)
 About the role
 
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
 
About the role: 
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
 Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
 Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
 Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
 Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
 Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
 Mentor engineers and advocate for cloud security across the organization.
 
About you: 
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
 Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
 Expert-level knowledge and hands-on experience with Terraform.
 Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
 Familiarity with CNAPP solutions such as Wiz
 Familiarity with SIEM solutions such as Panther
 Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
 Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
 Bonus points for security certifications from SANS or OffSec.
 Excellent problem-solving, communication, and leadership skills.
 Our Engineering team
 
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
 
How we took down production…
 Beyond Linear Notebooks
 A pragmatic approach to live collaboration
 Our stack
 
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
 
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
 
The salary range for this role is: $200,000 - $265,000
 
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
 
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
 
About Hex
 
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
 
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Deloitte

<div>Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Work You'll Do 
<ul><li>
Application Security: Evaluate, enhance, and document secure software development practices. Lead AppSec assessments, support remediation efforts, and help set security requirements for platforms and custom applications.
</li><li>Compliance &amp; RMF (NIST): Provide deep support for federal compliance initiatives, specializing in NIST 800-53 and RMF processes. Develop control implementation plans, assist with artifacts, advise on audit readiness and manage POAMs
</li><li>DevSecOps (Cloud Security): Guide secure DevOps practices, integrating security into CI/CD pipelines and cloud architectures. Partner with teams to implement security automation and validate environments (AWS,).
</li><li>Vulnerability Assessment &amp; VAT Management: Conduct and coordinate vulnerability scans using Tenable, Inspector, or similar tools. Drive VAT resolution by engaging stakeholders, tracking remediation, and closing findings.
</li><li>Technical Project Delivery: Take charge of critical projects-organizing tasks, managing deadlines, and ensuring results. Handle ad-hoc assignments and maintain excellent documentation.
</li><li>Consulting: Communicate solutions and risks to technical and non-technical stakeholders. Lead and support ISSO activities, compliance reviews, and team enablement.</li></ul> 

The Team 
 
Deloitte's Government and Public Services (GPS) practice - our people, ideas, technology, and outcomes-are designed for impact. Serving federal, state, &amp; local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. 
The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals. 
 
Qualifications 
 
Required:
 
<ul><li>Bachelor's degree required.</li><li>
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.</li><li>
Active Secret Clearance.</li><li>
Ability to work onsite up to two days a week onsite.</li><li>
3+ years in cloud security, security engineering, DevSecOps, or security automation, along with a strong understanding of cloud security fundamentals: IAM, network segmentation, encryption/KMS, secrets management, logging/monitoring, secure storage patterns.</li><li>
Security + certification or similar industry cert.</li><li>
2+ years' experience within the following:</li><li><ul><li>
At least one major cloud platform (AWS or Azure strongly preferred).</li><li>
Demonstrated automation capability:</li><li>
Proficiency in Python, PowerShell, or similar.</li><li>
Experience integrating APIs, automating workflows, and producing auditable outputs.</li><li>
Experience implementing security controls and/or compliance work in regulated environments (federal, healthcare, finance, etc.).</li><li>
Familiarity with Git-based workflows and CI/CD systems.</li></ul></li></ul> 
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html</div>

Cloud Security Engineer, Secret Cleared

Openkyber

<div>Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Application Security Architect &amp; Engineer Hybrid , VA PLEASE SEND THE RESUMES TO hirings@openkyber.com ! Job Description: Description: ABOUT THE ROLE Virginia Tax is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts. The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture. Responsibilities include but not limited to: Provide security guidance, training, and best practices for development and operations teams. Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies. Evaluate software architecture and design for security risks and alignment with DevSecOps principles. Promote and enforce secure coding standards and guidelines. Review source code to identify vulnerabilities and recommend remediation strategies. Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL). Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client server models. Identify and address common vulnerabilities, including those outlined in the OWASP Top 10. Support vulnerability remediation, patch management, and continuous improvement efforts. Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable. Interpret and act on findings from SIEM systems, including Splunk. Apply knowledge of common security controls and frameworks. Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS). Implement and evaluate AWS cloud security controls and best practices. Create, maintain, and review System Security Plans (SSPs). Troubleshoot and resolve complex technical and security-related issues. Stay current with evolving threats, technologies, and industry trends. Develop detailed plans and communicate risks, impacts, and recommendations effectively. Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows. Provide constructive, actionable feedback to application teams. Communicate technical concepts clearly to both technical and nontechnical audiences. Work closely with other security analysts and technology teams to support agency and enterprise security initiatives. Manage multiple tasks, prioritize effectively, and meet deadlines. Apply critical thinking to evaluate and mitigate security risks and vulnerabilities. Required Skills/Experience: Five or more years experience in application security. Two or more years network or firewall/AWS Security Groups. Experience with log collection, vulnerability scans and remediation, or privileged access management. Strong understanding of security concepts, network protocols, and threat vectors. Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools. Excellent analytical and problem-solving skills. Strong communication, collaboration, and documentation skills. Ability to work independently and as part of a team in a fast-paced environment. Have experience and a strong knowledge of the following: Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Linux and Windows Operating Systems, Baseline hardening of operating systems IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall At least one of these certs below is REQUIRED: CompTIA Security+ ISC2 CC (Certified in Cybersecurity) Offensive Security Certified Professional (OSCP) CCSP (Certified Cloud Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) At least one of these certs below is highly DESIRED (Independently and or with one of the above) AWS Solutions Architect (Associate/Professional) AWS Security Specialty At least one of the any is DESIRED CompTIA PenTest+ Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA Fill the above skills in the below box and have consultant to complete SKILLS MATRIX Skill Required Amount of Experience Experience Application Security Required 5 Years Network or Firewall/AWS security Groups Required 2 Years Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2 Years Experience with log collection, vulnerability scans and remediation, or privileged access management Required 4 Years Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required 4 Years Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment. Required 4 Years One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired 5 Years Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired 2 Years Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired 2 Years IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired 2 Years One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) Highly desired OpenKyber Austin, TX 78727| Direct: OpenKyber is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All OpenKyber staff must be able to demonstrate the legal right to work in the United States. OpenKyber is an E-Verify employer
For applications and inquiries, contact: hirings@openkyber.com</div>

OCI Cloud Security Engineer

<div>Title: Prisma Cloud Engineer Location: Dallas, TX (Hybrid) Duration: Contract / Full Time Job Description:
Looking for an experienced Prisma Cloud Engineer with 6+ years of experience in cloud security and hands-on expertise in deploying and integrating Prisma Cloud/Cortex Cloud across multi-cloud environments (AWS, Azure, Google Cloud Platform, OCI). The candidate will act as a Cloud Security SME and be responsible for implementing CSPM, CWPP, CIEM, and Kubernetes security controls.
Required Skills:
<ul><li>6+ years of experience in Cloud Security Engineering</li>
<li>Hands-on experience with Prisma Cloud / Cortex Cloud deployment and integration</li>
<li>Strong knowledge of CSPM, CWPP, CIEM, and KSPM implementations</li>
<li>Experience securing AWS, Azure, Google Cloud Platform, OCI cloud environments</li>
<li>Experience with containers, Kubernetes security, and runtime protection</li>
<li>Experience integrating IaC security in CI/CD pipelines (Terraform, CloudFormation, Jenkins, GitLab, Azure DevOps, GitHub Actions)</li>
<li>Strong knowledge of IAM, least privilege, and cloud security best practices</li>
<li>Experience integrating security tools with SIEMs, APIs, and automation</li>
<li>Excellent communication and client-facing skills</li>
</ul>Responsibilities:
<ul><li>Deploy and onboard Prisma/Cortex Cloud across multiple cloud accounts</li>
<li>Configure and manage CSPM policies to detect and remediate cloud misconfigurations</li>
<li>Implement CWPP for host, container, and serverless workload protection</li>
<li>Configure CIEM to optimize IAM policies and enforce least privilege access</li>
<li>Implement Kubernetes Security Posture Management (KSPM) for cluster security</li>
<li>Integrate Prisma Cloud with SIEM, ticketing systems, and enterprise tools</li>
<li>Implement IaC security scanning within CI/CD pipelines</li>
<li>Work with clients to assess security posture and implement best practices</li>
</ul>For applications and inquiries, contact: hirings@openkyber.com</div>

OCI Cloud Support Intern

Magnet

<div>
 
 
 Employer Overview
 
 
 
 A national-scale private cloud platform provides secure, integrated IT services across multiple subsidiaries. The platform delivers
 
 multi-tenant, high-availability environments
 
 with advanced network and application security, supporting compliance, Zero Trust access, and secure workload hosting across hybrid infrastructures.
 
 
 
 
 
 
 Job Summary
 
 
 
 The Security Infrastructure Engineer is responsible for designing, implementing, and operating the security infrastructure of the private cloud platform. The role ensures
 
 secure network and application access, tenant-level segmentation, and Zero Trust principles
 
 , while maintaining high availability and compliance across multi-site environments.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Design and operate Fortinet security platforms (NGFW, WAF, ADC, NAC, FortiAuthenticator, Sandbox)
 </li>
 <li>
 Implement and manage tenant-level security segmentation and firewall policies
 </li>
 <li>
 Integrate Zero Trust access solutions (e.g., AppGate or equivalent)
 </li>
 <li>
 Manage north-south and east-west traffic inspection and security policies
 </li>
 <li>
 Support secure application publishing and WAF protection
 </li>
 <li>
 Collaborate with SOC teams for incident response and threat mitigation
 </li>
 <li>
 Ensure compliance with security policies and regulatory requirements
 </li>
 <li>
 Support disaster recovery and high availability for security infrastructure
 </li>
 <li>
 Optimize security performance and scalability across multi-tenant environments
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Networks, Computer Engineering, or related field (preferred)
 </li>
 <li>
 6&ndash;10 years in network and infrastructure security
 </li>
 <li>
 Hands-on experience with enterprise security platforms in large-scale environments
 </li>
 <li>
 Proven experience with TCP/IP, routing, and network security principles
 </li>
 <li>
 Familiarity with SIEM integration and incident response coordination
 </li>
 <li>
 Strong analytical and problem-solving abilities
 </li>
 <li>
 Excellent communication and collaboration skills
 </li>
 <li>
 Detail-oriented with proactive security mindset
 </li>
 <li>
 Ability to work independently and in cross-functional teams
 </li>
 <li>
 Fortinet ecosystem: FortiGate, FortiWeb, FortiADC, FortiNAC, FortiAuthenticator, FortiSandbox
 </li>
 <li>
 Firewall policy design and tenant-level network segmentation
 </li>
 <li>
 Zero Trust architecture and secure remote access
 </li>
 <li>
 DDoS protection and traffic filtering
 </li>
 <li>
 Application security and WAF management
 </li>
 <li>
 Integration with SIEM and SOC platforms
 </li>
 <li>
 Proficiency with security management, monitoring, and orchestration tools
 </li>
 <li>
 Familiarity with hybrid and multi-site cloud environments
 </li>
 <li>
 Fluency in English (written and spoken)
 </li>
 <li>
 Ability to maintain 24x7 security infrastructure availability
 </li>
 <li>
 Capacity to implement secure access and segmentation across multi-tenant environments
 </li>
 <li>
 Capability to support DR and high-availability operations
 </li>
 <li>
 Ability to optimize security performance and enforce compliance policies
 </li>
 <li>
 Fortinet NSE4 / NSE7 / NSE8
 </li>
 <li>
 CISSP or equivalent security certification
 </li>
 <li>
 CCNP Security or equivalent
 </li>
 </ul>
</div>

Security Infrastructure Engineer (Fortinet & Zero Trust)

Search 3628+ Cloud security engineer jobs near you this June. New roles added regularly across leading industries. Apply today.

3628 cloud security engineer jobs Near Me

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer, Secret Cleared

OCI Cloud Security Engineer

OCI Cloud Support Intern

Security Infrastructure Engineer (Fortinet & Zero Trust)