Cloud Security Engineer

What We Do/Project

The Cloud Security Engineer is a hands-on technical security professional responsible for designing, implementing, and operating cloud security controls across public cloud environments, with a primary focus on Google Cloud Platform (GCP).

Job Responsibilities / Typical Day in the Role

Must Have Skills / Requirements

1. Strong knowledge and practical experience in Cloud Vulnerability Management a. 7+ years of experience; Vulnerability identification, prioritization, risk assessment, and remediation coordination across cloud workloads and services.
2. Demonstrated hands-on experience with AWS and GCP. a. 7+ years of experience; Cloud experience within a production environment.
3. Hands-on experience with at least one CSPM/CNAPP platform a. 3+ years of experience; (e.g., Wiz, Orca, Prisma Cloud, Lacework, or equivalent)

Nice to Have Skills / Preferred Requirements

1. Cloud security certifications such as: a. GCP Professional Cloud Security Engineer b. AWS Security Specialty or Solutions Architect c. Azure Security Engineer or Solutions Architect
2. Experience with AI/ML platforms and securing machine learning workloads; prior proof-of-concept or project experience is a plus.
3. Knowledge of AWS and/or Azure security services and architecture.
4. Familiarity with Oracle Cloud Infrastructure (OCI).
5. Experience integrating security tooling with platforms such as Slack, Jira, and CI/CD pipelines.
6. Experience with SIEM and observability platforms (e.g., Splunk).
7. Azure Experience is a plus.
8. Experience with Brinqa.

Soft Skills:

1. Excellent written and verbal communication skills with the ability to collaborate effectively with engineering and security stakeholders.

Technology Requirements:

1. Demonstrated hands-on experience securing Google Cloud Platform (GCP) environments in production.
2. Strong knowledge and practical experience in Cloud Vulnerability Management, including vulnerability identification, prioritization, risk assessment, and remediation coordination across cloud workloads and services.
3. Hands-on experience with at least one CSPM/CNAPP platform (e.g., Wiz, Orca, Prisma Cloud, Lacework, or equivalent).
4. Proficiency in Python (preferred) or similar programming/scripting languages, with experience developing automation or security tooling.
5. Strong understanding of cloud IAM concepts, least-privilege access, and identity governance in GCP.
6. Solid understanding of cloud networking fundamentals, including VPC design, routing, segmentation, and secure connectivity patterns.
7. Experience securing containerized workloads and Kubernetes environments.
8. Familiarity with Infrastructure-as-Code (Terraform preferred) and secure configuration management practices.
9. Strong understanding of security principles, risk management, and compliance considerations in public cloud environments.

Education / Certifications

1. Bachelor’s degree in Computer Science, Information Security, or related technical discipline, or equivalent practical experience.

Additional Notes

• Sourcing in VA. • Hybrid role – 3 days on-site.