cloud security engineer

Apex Technology

<div><p>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.</p><p>
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.</p><p>
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.</p><p>
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.</p><p></p><h1 class="jobSectionHeader"><b>
About the Role</b></h1><p>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions.<br>
<br>
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
<br>
<br>
<b>The candidate must hold an active Secret clearance (TS/SCI preferred)</b> and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.</p><p></p><h1 class="jobSectionHeader"><b>
Responsibilities:
</b></h1><ul><li><p>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</p></li><li><p>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</p></li><li><p>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</p></li><li><p>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</p></li><li><p>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous<br>
monitoring of cloud resources.</p></li><li><p>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</p></li><li><p>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</p></li><li><p>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</p></li><li><p>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or<br>
modernization initiatives.</p></li><li><p>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools,<br>
processes, and best practices.</p></li><li><p>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</p></li><li><p>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</p></li><li><p>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</p></li><li><p>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</p></li><li><p>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</p></li><li><p>
Ability to be on-site 5 days a week at our office Playa Vista.
</p></li></ul><h1 class="jobSectionHeader"><b>Requirements:</b></h1><ul><li><p>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</p></li><li><p>
Must be a U.S. citizen.</p></li><li><p>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</p></li><li><p>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</p></li><li><p>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments.<br>
<br>
</p><h1 class="jobSectionHeader"><b>Technical Skills:</b></h1><ul><li><p>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</p></li><li><p>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</p></li><li><p>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</p></li><li><p>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</p></li><li><p>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</p></li></ul></li><li><p><b>
Additional Certifications:
</b></p><ul><li><p>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</p></li></ul></li></ul><h1 class="jobSectionHeader"><b>
Why Join Apex?</b></h1><p>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.</p><p></p><h2 class="jobSectionHeader"><b>
What We Offer For Full-time Employees:</b></h2><ul><li><p><b>
Shared upside:</b> Receive equity in Apex, letting you benefit from the work you create</p></li><li><p><b>
Best-in-class healthcare:</b> 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</p></li><li><p><b>
Comprehensive PTO package</b> to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</p></li><li><p><b>
Competitive 401(k) plan</b> with generous matching - 100% match on first 3%, 50% on next 2%</p></li><li><p><b>
8 weeks paid parental leave</b> plus childcare reimbursement up to $350/day for work-related travel</p></li><li><p><b>
Daily catered lunch and unlimited snacks</b> to keep you fueled throughout the day</p></li><li><p><b>
Vibrant community:</b> Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</p></li><li><p><b>
Your dream desk setup</b> and all the tools you need to be your most productive self</p></li><li><p><b>
World-class Playa Vista office</b> with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</p></li><li><p><b>
Real impact opportunity:</b> Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</p></li></ul><p><i>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.</i></p><p></p><h1 class="jobSectionHeader"><b>
Equal Opportunity Employer</b></h1><p>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.</p><p></p><p>
Compensation Range: $120K - $170K</p></div>

Cloud Security Engineer

Booz Allen Hamilton

<div>Cloud Security Engineer<p><b>
The Opportunity</b><b>:</b></p><p>
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</p></li><li><p>
4+ years of experience with secure IT architecture and computing hardware and software</p></li><li><p>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</p></li><li><p>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</p></li><li><p>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</p></li><li><p>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</p></li><li><p>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</p></li><li><p>
Top Secret clearance</p></li><li><p>
HS diploma or GED</p></li><li><p>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
Experience assessing and authorizing network connections between on-premise and cloud</p></li><li><p>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</p></li><li><p>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</p></li><li><p>
Experience with code management tools such as Git or GitLab in a team setting</p></li><li><p>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</p></li><li><p>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</p></li><li><p>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</p></li><li><p>
Ability to work independently and as an integrated member of a project team</p></li><li><p>
Possession of excellent verbal and written communication skills</p></li><li><p>
TS/SCI clearance</p></li></ul><p></p><p><b>
Clearance:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Candidate AI Usage Policy</b></p><p>
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on <b>your </b>own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited <b>unless permission is explicitly provided</b>.
</p><p></p><p><b>Work Model</b><br>
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.</p><ul><li><p><b>
Remote</b>: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</p></li><li><p><b>
Hybrid</b>: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</p></li><li><p><b>
Onsite</b>: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</p></li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Hex Technologies

SF, NYC, or Remote (USA)
<br>About the role
<br><br>
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
<br><br>
<b>About the role:</b><br>
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
<br>Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
<br>Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
<br>Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
<br>Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
<br>Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
<br>Mentor engineers and advocate for cloud security across the organization.
<br><br>
<b>About you:</b><br>
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
<br>Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
<br>Expert-level knowledge and hands-on experience with Terraform.
<br>Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
<br>Familiarity with CNAPP solutions such as Wiz
<br>Familiarity with SIEM solutions such as Panther
<br>Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
<br>Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
<br>Bonus points for security certifications from SANS or OffSec.
<br>Excellent problem-solving, communication, and leadership skills.
<br>Our Engineering team
<br><br>
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
<br><br>
How we took down production…
<br>Beyond Linear Notebooks
<br>A pragmatic approach to live collaboration
<br>Our stack
<br><br>
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
<br><br>
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
<br><br>
<b>The salary range for this role is:</b> $200,000 - $265,000
<br><br>
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
<br><br>
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
<br><br>
About Hex
<br><br>
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
<br><br>
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Xsolis

<div><div><b>Position Summary Details</b></div><div><br>
<div>
<div>Xsolis is a SaaS healthcare technology company breaking down silos between healthcare payors and providers with its Dragonfly platform that leverages predictive analytics, Machine Learning (ML), and Generative AI. Security, privacy, and trust are foundational for everything we build.</div></div><div><br>
<div>
</div></div><div><div>As a Sr. Cloud Security Engineer, you will help lead the design, implementation, and continuous improvement of our cloud security posture. You will play a critical role in securing AI-driven healthcare platforms running in modern cloud environments (AWS), ensuring compliance with healthcare regulations, and protecting sensitive patient data. This role requires deep technical expertise in cloud security, strong experience with regulated environments, and a forward-thinking mindset around securing AI/ML, Generative IA, and emerging Agentic AI systems.</div></div><div><br>
<div>
</div></div><div><div>We believe that effective Sr. Cloud Security Engineer needs more than technical know-how. The role also requires several non-technical to be a success at Xsolis including the following skills: motivation, communication, organization, prioritization, problem-solving, and adaptability.</div></div><div><br>
<div>
</div></div></div><div><b>Essential Duties &amp; Responsibilities</b><br>
<br>
The essential functions include, but are not limited to the following:</div><br>
<div></div>
<div>
<div><div><div>Cloud Security Architecture &amp; Engineering</div>
</div>
<div><ul><li>Design and implement secure cloud architectures across AWS
</li><li>Lead the development of security guardrails, policies, and standards (IAM, network segmentation, encryption, etc.)
</li><li>Implement Zero Trust architecture principles across cloud-native systems and user endpoints
</li><li>Secure containerized and serverless workloads (ECS, Kubernetes, Docker, Lambda, etc.)
</li><li>Assess existing cloud implementations, identifying security issues and prioritizing them for remediation.</li></ul>
</div>
<div><div>Workforce Security</div>
</div>
<div><ul><li>Define and enforce security controls for endpoints and resource access
</li><li>Implement improvements in identity lifecycle and PAM
</li><li>Partner with engineering teams to design and implement a secure VDI environment to support PHI access</li></ul>
</div>
</div><div><div><div>AI/ML &amp; GenAI Security</div>
</div>
<div><ul><li>Define and enforce security controls for AI/ML and GenAI applications
</li><li>Partner with Data Science to mitigate risks such as model poisoning, prompt injection, data leakage, and adversarial attacks
</li><li>Secure Agentic AI systems, including autonomous workflows and decision-making agents
</li><li>Collaborate with data science teams to embed security into model development lifecycle (MLSecOps)</li></ul>
</div>
<div><div>Compliance &amp; Risk Management</div>
</div>
<div><ul><li>Collaborate with GRC to ensure adherence to healthcare regulations (HIPAA, HITRUST, SOC 2, etc.)
</li><li>Conduct risk assessments and threat modeling for cloud and AI systems
</li><li>Support audits and compliance initiatives with appropriate controls and documentation</li></ul>
</div>
<div><div>Detection &amp; Response</div>
</div>
<div><ul><li>Implement and tune cloud-native security monitoring and detection (SIEM, CSPM, CWPP)
</li><li>Develop automated response and remediation workflows
</li><li>Help manage incident response efforts for cloud security events</li></ul>
</div>
<div><div>DevSecOps &amp; Automation</div>
</div>
<div><ul><li>Deep experience with SAST, DAST, SCA, and the use of AI coding tools
</li><li>Familiarity with programming languages (Python, Java, Node.js, C#)
</li><li>Integrate and optimize security in CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation)
</li><li>Automate security controls, scanning, and policy enforcement
</li><li>Partner with engineering teams to shift security left</li></ul>
</div>
</div><div><div><div>Leadership &amp; Collaboration</div>
</div>
<div><ul><li>Mentor other engineers, security analysts, and promote security best practices across teams
</li><li>Partner with product, engineering, people operations, enterprise systems, and data science teams
</li><li>Stay ahead of emerging threats in cloud and AI security
</li><li>Collaborate with various teams (internal and external) to meet business objectives and support Xsolis values</li></ul>
</div></div></div><div><b>Minimum Qualifications (Knowledge, Skills, and Abilities)</b></div>
<div><div><b><i>Education:</i></b></div>
<ul><li>
<div><ul><li><div>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems or working experience required</div>
</li></ul>
</div><div><ul><li><div>Master&rsquo;s degree in Cybersecurity, Computer Science, or Information Systems degree desirable</div>
</li></ul>
</div><div><ul><li><div>Certifications such as CISSP, CCSP, AWS Security certifications are highly desired.</div>
</li></ul>
</div></li></ul><div><b><i>Experience:</i></b></div>
<ul><li>
<div><ul><li><div>5+ years of experience in cloud security or cybersecurity engineering</div>
</li></ul>
</div><div><ul><li><div>Strong knowledge of cloud security principles (IAM, networking, encryption, logging, etc.)</div>
</li></ul>
</div><div><ul><li><div>Hands-on experience using and securing AWS services</div>
</li></ul>
</div><div><ul><li><div>Solid understanding of securing containerized environments (Kubernetes, Docker)</div>
</li></ul>
</div><div><ul><li><div>Deep understanding of security in regulated environments (HIPAA, HITRUST, SOC 2)</div>
</li></ul>
</div><div><ul><li><div>Broad experience implementing automation to gain efficiencies</div>
</li></ul>
</div><div><ul><li><div>Experience implementing Zero Trust Architecture</div>
</li></ul>
</div><div><ul><li><div>Proficiency in programming or scripting</div>
</li></ul>
</div><div><ul><li><div>Experience identifying AI security risks and securing AI technologies</div>
</li></ul>
</div><div><ul><li><div>Ability to work and indirectly lead a wide range of professionals and team members.</div></li></ul><br>
</div>
</li></ul></div><div></div><div><b>Supervisory Responsibilities</b><br>
This role does not have any direct reports and is a single contributor role.</div>
<div></div>
<div><b>Working Environment and Travel Requirements</b></div>
<p>
Work is typically in a normal office administrative environment involving minimal exposure to physical risks. Position requires little to moderate physical activity. Mostly sedentary work exerting up to 10 pounds of force occasionally or a negligible amount of force to lift, carry, push, pull, or otherwise move objects. Work involves sitting most of the time, but may involve walking or standing for brief periods of time. No significant stooping is usually required.</p><div><b>
About Us</b></div>
<div></div>
<div>Xsolis is an AI-driven technology company with a human-centered approach, fostering collaboration between healthcare providers and payers through real-time transparency, objective data for increased accuracy and alignment of medical necessity decisions, and more efficient outcomes. Dragonfly&reg;, its AI-driven proprietary platform, is the first and only solution to use real-time predictive analytics to continuously assign an objective medical necessity score and assess the anticipated level of care for every patient, enabling more efficiency across the healthcare system. Xsolis is headquartered in Franklin, Tennessee.
<div></div>
<div><b>Our Values:</b></div>
<ul><li>Team First</li><li>
Client Passionate</li><li>
Always Curious</li><li>
Deliver Excellence</li></ul>
Xsolis has been ranked on the Inc. 5000 and Deloitte Technology Fast 500 lists in both 2022 and 2023 as a fastest-growing private company, and was named 2022 Best in Business among private companies by the Nashville Business Journal. Xsolis executives have been featured in Becker's Hospital Review, Becker's Payer Issues, Chief Healthcare Executive, CIO Review, Managed Healthcare Executive, Medical Economics, HIT Consultant, Healthcare IT Today, among other leading publications.
<div></div>
For more information, visit www.xsolis.com.
<div></div>
<div><div><b>Where We&rsquo;ll Go Together</b><br>
<br>
Our company will become the new standard for utilization management. You&rsquo;ll be a core part of realizing that goal and a valued contributor to the culture and climate we wish to create. Our wins are your wins, and we&rsquo;re dedicated to making you feel your work matters (it truly does).</div>
<div></div>
<div>If any of this speaks to you, let&rsquo;s get in touch.</div>
</div>
<div></div><div><div><b>Candidates must successfully pass a background check and drug screen prior to beginning employment with XSOLIS.</b></div>
<div><br>
<b>XSOLIS is an equal opportunity employer that is committed to hiring based upon merit, skills, experience, and qualifications. We recognize the importance of an inclusive and diverse workforce that celebrates all individuals from all walks of life. We encourage everyone to apply regardless of gender identity, race, veteran status, age, sexual orientation, or any other protected class.</b></div>
<div><br>
<b>All employees of XSOLIS fall under the same security role, which includes access to sensitive information, including proprietary data and PHI.</b></div>
<div></div>
<div>All official communications from our recruitment team come from emails ending in @xsolis.com or @echo.newtonsoftware.com. Job offers are only extended after a formal interview process, and any offer will come through official channels. You can verify postings on our official careers page: https://www.xsolis.com/about/careers.</div></div></div></div>

Senior Cloud Security Engineer

Watan First Digital - Egypt

<div>
 <p>
  <strong>
   Job Summary
  </strong>
 </p>
 <p>
  We are seeking a highly skilled Senior Cloud Security Engineer to design, implement, and manage the security architecture of our digital ecosystem. The primary objective is to protect the company's cloud-native applications and infrastructure from evolving cyber threats&mdash;such as Ransomware and unauthorized data exfiltration&mdash;while ensuring 100% business continuity through robust infrastructure hardening and immutable recovery strategies.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Infrastructure Hardening &amp; Networking: Secure Virtual Machines (VMs) and Virtual Networks (VNETs) by enforcing strict Network Security Groups (NSGs). Eliminate public-facing vulnerabilities by replacing standard RDP (3389) access with secure solutions like Azure Bastion and VPN Gateways.
  </li>
  <li>
   Identity &amp; Access Management (IAM): Implement the "Principle of Least Privilege" across the Azure environment. Enforce Multi-Factor Authentication (MFA) and manage Privileged Identity Management (PIM) for all administrative access.
  </li>
  <li>
   Advanced Data Protection: Ensure all sensitive data is encrypted at rest and in transit. Manage secrets, certificates, and cryptographic keys using Azure Key Vault.
  </li>
  <li>
   Backup &amp; Disaster Recovery (BDR): Architect and maintain an Immutable Backup strategy. Ensure that recovery points are isolated and protected from the production environment to guarantee restoration even in the event of a total system compromise.
  </li>
  <li>
   Threat Detection &amp; Monitoring: Deploy and manage Microsoft Defender for Cloud and Microsoft Sentinel (SIEM/SOAR) to detect, investigate, and respond to security alerts in real-time.
  </li>
  <li>
   Vulnerability Management: Conduct regular automated and manual vulnerability assessments on servers and databases (SQL, NoSQL). Oversee the immediate patching of critical security flaws.
  </li>
  <li>
   Incident Response: Lead the security incident response lifecycle. Create and test playbooks for rapid containment, eradication, and recovery during a security breach.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical Requirements
  </strong>
 </p>
 <ul>
  <li>
   Experience: Minimum of 5+ years in Cybersecurity, with at least 3 years of hands-on experience exclusively in Microsoft Azure.
  </li>
  <li>
   Network Security: Deep expertise in Azure Firewalls, Application Gateways, WAF (Web Application Firewall), and Private Links.
  </li>
  <li>
   System Administration: Strong knowledge of Windows Server and Linux hardening techniques.
  </li>
  <li>
   Automation: Proficiency in scripting (PowerShell, Azure CLI) and Infrastructure as Code (Terraform or Bicep) to automate security compliance.
  </li>
  <li>
   DevSecOps: Experience integrating security checks into CI/CD pipelines (Azure DevOps / GitHub Actions).
  </li>
  <li>
   Database Security: Proven experience securing cloud-based databases and managing data integrity.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Qualifications &amp; Certifications
  </strong>
 </p>
 <ul>
  <li>
   AZ-500: Microsoft Azure Security Technologies (Highly Preferred).
  </li>
  <li>
   SC-200: Microsoft Security Operations Analyst.
  </li>
  <li>
   CISSP or CISM certification.
  </li>
  <li>
   Experience in high-security environments or research-driven technology sectors
  </li>
 </ul>
</div>


Openkyber

<div><p>Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Application Security Architect &amp; Engineer Hybrid , VA PLEASE SEND THE RESUMES TO hirings@openkyber.com ! Job Description: Description: ABOUT THE ROLE Virginia Tax is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts. The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture. Responsibilities include but not limited to: Provide security guidance, training, and best practices for development and operations teams. Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies. Evaluate software architecture and design for security risks and alignment with DevSecOps principles. Promote and enforce secure coding standards and guidelines. Review source code to identify vulnerabilities and recommend remediation strategies. Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL). Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client server models. Identify and address common vulnerabilities, including those outlined in the OWASP Top 10. Support vulnerability remediation, patch management, and continuous improvement efforts. Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable. Interpret and act on findings from SIEM systems, including Splunk. Apply knowledge of common security controls and frameworks. Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS). Implement and evaluate AWS cloud security controls and best practices. Create, maintain, and review System Security Plans (SSPs). Troubleshoot and resolve complex technical and security-related issues. Stay current with evolving threats, technologies, and industry trends. Develop detailed plans and communicate risks, impacts, and recommendations effectively. Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows. Provide constructive, actionable feedback to application teams. Communicate technical concepts clearly to both technical and nontechnical audiences. Work closely with other security analysts and technology teams to support agency and enterprise security initiatives. Manage multiple tasks, prioritize effectively, and meet deadlines. Apply critical thinking to evaluate and mitigate security risks and vulnerabilities. Required Skills/Experience: Five or more years experience in application security. Two or more years network or firewall/AWS Security Groups. Experience with log collection, vulnerability scans and remediation, or privileged access management. Strong understanding of security concepts, network protocols, and threat vectors. Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools. Excellent analytical and problem-solving skills. Strong communication, collaboration, and documentation skills. Ability to work independently and as part of a team in a fast-paced environment. Have experience and a strong knowledge of the following: Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Linux and Windows Operating Systems, Baseline hardening of operating systems IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall At least one of these certs below is REQUIRED: CompTIA Security+ ISC2 CC (Certified in Cybersecurity) Offensive Security Certified Professional (OSCP) CCSP (Certified Cloud Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) At least one of these certs below is highly DESIRED (Independently and or with one of the above) AWS Solutions Architect (Associate/Professional) AWS Security Specialty At least one of the any is DESIRED CompTIA PenTest+ Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA Fill the above skills in the below box and have consultant to complete SKILLS MATRIX Skill Required Amount of Experience Experience Application Security Required 5 Years Network or Firewall/AWS security Groups Required 2 Years Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2 Years Experience with log collection, vulnerability scans and remediation, or privileged access management Required 4 Years Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required 4 Years Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment. Required 4 Years One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired 5 Years Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired 2 Years Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired 2 Years IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired 2 Years One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) Highly desired OpenKyber Austin, TX 78727| Direct: OpenKyber is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All OpenKyber staff must be able to demonstrate the legal right to work in the United States. OpenKyber is an E-Verify employer</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI Cloud Security Engineer

Apple

<p>Apple Services Engineering (ASE), the team behind iCloud and Media services and the infrastructure that powers it, is looking for a Senior Security Engineer to partner with engineering teams working on new products and features. You will collaborate with developers, site reliability engineers, and security teams to protect ASE services and design a secure foundation for services at Apple. Your work will include full end-to-end security assurance activities including security architecture, threat modeling, some security testing, and risk management. You will be working with partner teams in security engineering, privacy, and offensive security to keep Apple's services secure for our users. If you love diving into different complex technical systems, sharing security improvements, and making security better, we want to talk with you!<br>
<br>
<b>Description</b><br>
<br>
In this role, you will be the primary security team point of contact for several large engineering efforts. You will work with engineering teams throughout their development lifecycle. You will conduct security reviews and develop threat models and use the insights from these engagements to build standard methodologies. You will help define, automate and advocate for platform-wide security improvements. You will partner with your colleagues to raise the security bar for all engineering teams at Apple.<br>
<br>
As a technical lead responsible for the security of Apple's internet-facing services and backend infrastructure, you will be: Innately curious, listening for nuances and digging into details to understand systems and their weaknesses; Able to identify areas that are ripe for improvement and establishes appropriate security goals; Experienced and comfortable establishing relationships with teams to drive security improvements; Current on new security technologies, vulnerabilities, and methodologies; An excellent verbal and written communicator; Able to develop proof of concept systems to automate security recommendations, vulnerability discovery, and process workflows; Able to use data to drive security review efficiency and prioritize high-value security team engagement Responsible for security decisions impacting millions of users.<br>
<br>
<b>Preferred Qualifications</b><br>
<br>
Bachelor's Degree or equivalent experience preferred<br>
<br>
Experience securing cloud-native applications and workloads including containerized environments (Kubernetes/EKS/GKE), serverless architectures (Lambda/Cloud Functions), and modern CI/CD pipelines<br>
<br>
Experience with multiple cloud platforms (AWS, GCP, Azure, AliCloud) and the ability to perform comparative security analysis across different cloud providers' security models and controls<br>
<br>
<b>Minimum Qualifications</b><br>
<br>
5 or more years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership<br>
<br>
Hands-on experience in cloud security engineering with demonstrated expertise in securing at least one major cloud platform (AWS, GCP, or AliCloud) in production environments<br>
<br>
Deep technical knowledge of cloud-native security controls including identity and access management (IAM), network security (VPCs, security groups, firewall rules), encryption (KMS, data protection), and logging/monitoring services native to major cloud platforms<br>
<br>
Proven experience working with and using policy-as-code frameworks such as AWS Service Control Policies (SCPs), GCP Organization Policy Constraints, or AliCloud Control Policies to enforce security guardrails at scale<br>
<br>
Strong background in third-party risk assessment and vendor security reviews, including the ability to evaluate cloud service architectures, identify security gaps, and provide actionable remediation guidance<br>
<br>
Demonstrated ability to develop security requirements and design documentation for complex cloud environments, translating technical controls into clear, implementable guidance for engineering teams<br>
<br>
Conversant in at least one programming language such as Python, Java, Go, or Swift<br>
<br>
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant .<br>
<br>
<b>Pay &amp; Benefits</b><br>
<br>
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $171,600 and $302,200, and your base pay will depend on your skills, qualifications, experience, and location.<br>
<br>
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.<br>
<br>
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.</p>

Senior Cloud Security Engineer - Design Review

Search 10000+ Cloud security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 cloud security engineer jobs Near Me

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Senior Cloud Security Engineer

Senior Cloud Security Engineer

OCI Cloud Security Engineer

Senior Cloud Security Engineer - Design Review