Cloud Security Engineer

Quantum Sky is searching for an enthusiastic Cloud Security Engineer to help our largest Federal client monitor and secure their rapidly expanding cloud footprint against would-be attackers. The successful candidate will have a passion for and experience with being the foremost Cloud Security expert in a large, enterprise SOC environment and augment the team’s knowledge and skills regarding AWS to develop alerting and response procedures for cloud events and perform cloud hunting, monitoring, and incident response.Responsibilities:Perform cloud hunting and identify embedded threats effectively and efficientlyReview and analyze cloud logs to bring relevance and context to the dataLead cloud incident response activities as they occurDevelop a full set of cloud incident response playbooksWork with stakeholders to ensure full visibility into workloads running in the cloudEnsure all cloud logs are onboarded to the SIEM tool and the correct events are loggedDevelop and implement a full set of monitoring use cases to enable DOJ security tools to immediately and automatically detect cloud threatsContinuously tune security tools for optimization, i.e., maximum blocking with minimal false positivesDevise and implement additional KPIs and metrics that help DOJ monitor the overall health of this functionEnsure and enable DOJ’s participation in threat information-sharing initiatives across the USGAssist the engineering team with the deployment, configuration, and maintenance of cloud-based SOC tools, technologies, applications, and solutionsPerform research and lead proof of concept efforts to determine where additional technologies may be necessaryRequired:Able to work normal business hours (core) and occasional/limited on-call hours as requested by the client and/or as required by operational demands (e.g., during major incidents)Willingness to work at the client site in Washington DC at least part of the time is required (hybrid/telework)Eight (8) years of cyber security experience, with at least six (6) of those years working as a Cloud Security Engineer in an enterprise SOC environmentDemonstrated expertise in performing cyber threat hunting activities in cloud environments (e.g., SaaS, PaaS, IaaS, including O365, SIEM, EDR, and other cloud-based applications) is critically importantDemonstrated experience leading incident response activities when cloud-based tools and systems are involvedExperience across all major cloud providers (AWS, Azure, Google), with a focus on AWSBachelor’s degree required OR additional relevant experienceAbility to work as an integral part of a high-performing SOC team is requiredEffective verbal and written communication skills that include the ability to describe highly technical concepts in non-technical termsUnderstanding of recent cybersecurity policies and mandates such as EO 14028, M-21-31, NSM-8, and their impact on SOC activitiesDesired:Advance level Cloud Security certifications are strongly preferred (e.g.., AWS Security Specialty certification)CISSP, GCIH, and similar certifications are a plusClearance:Active Secret Clearance