Cloud Security Engineer

Overview In this Cloud Security Engineer role, you design, implement, and secure complex cloud environments for clients across GCP, Azure, and AWS, with a strong GCP emphasis. You provide SaaS security, network security, and compliance guidance in a customer-focused setting. You’ll work to ensure robust, compliant cloud infrastructures while engaging with clients as a trusted advisor. The role combines hands-on security work with governance and incident response at scale. Compensation / Benefitscompetitive salariesmedical, dental and vision coveragedisability coverageemployer paid life insurancemental health resources401(k) plan and parental leave ResponsibilitiesDesign secure cloud security architectures and optimize defenses across cloud environmentsMonitor and address security alerts using SIEM and related tools; participate in on-call rotationsPerform web, cloud, and mobile application penetration testing (black/gray/white box, DAST/SAST) and support red-team activitiesCreate architecture, data flow, and network diagrams to support customer requests; contribute to secure coding practicesManage cloud-native firewalls and WAFs (GCP/Azure/AWS) and enforce L4–L7 security rulesLead SIEM integration, alerting, and reporting improvements; develop automation via scriptingProvide SaaS security guidance (IAM, encryption, API security, secure baselines) and conduct risk assessmentsDrive compliance initiatives (GDPR, SOC 2, ISO 27001, CMMC, CSA STAR) and perform gap analysesEngage with customers to present security concepts, workshops, and relationship buildingSupport incident response with analysis, remediation, and IR plan documentationOversee vulnerability management and penetration testing programs; coordinate remediation with operations and development teamsStay current on emerging cloud security threats, technologies, and best practices Key requirements10+ years of cybersecurity experience with at least 4+ years in cloud securityStrong GCP security expertise and SIEM experienceProficiency with Azure and AWS security servicesExperience securing SaaS applications and IAM, encryption, API securityScripting skills (PowerShell, Python, Bash) and firewall/WAF managementExperience with SIEM platforms (Splunk, Microsoft Sentinel, Chronicle, Datadog)Knowledge of cloud IAM and multi-cloud security principlesFamiliarity with compliance frameworks (GDPR, SOC 2, ISO 27001, CMMC) and security assessmentsCISSP is required; Azure/Google certifications desirable; OSWE/OSCP and other security certifications a plusAbility to work independently in a fast-paced client-facing environmentExcellent communication and presentation skillsStrong communication and interpersonal skillsAbility to explain complex security concepts to diverse audiencesProblem-solving mindset with attention to detailGCP security services and best practicesAzure and AWS security servicesCloud-native firewalls and third-party firewalls