Cloud Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cloud Security Engineer based in the United States.

The Cloud Security Engineer will play a key role in strengthening and maintaining security across enterprise cloud environments, with a primary focus on AWS and Microsoft Azure, alongside exposure to Google Cloud Platform (GCP). In this part-time position, you will design, implement, and optimize cloud security controls to protect critical infrastructure, applications, and organizational data. You will work with enterprise security technologies to improve threat detection, vulnerability management, endpoint protection, and incident response capabilities. The role also involves securing containerized environments, automating security processes, and identifying opportunities to reduce cyber risks. Working closely with cloud architects, DevOps professionals, infrastructure engineers, and security operations teams, you will help embed security best practices throughout cloud operations. This is an excellent opportunity for a technically skilled professional seeking to contribute to advanced cybersecurity initiatives in a flexible, collaborative, and remote environment.

Accountabilities:

• Cloud Security Engineering
• Design, implement, maintain, and continuously improve security controls across AWS and Microsoft Azure environments, with additional support for GCP.
• Ensure secure cloud configurations, appropriate access controls, and alignment with recognized industry security standards and best practices.
• Strengthen identity and access management (IAM), network security, encryption, logging, and cloud infrastructure protection.
• Security Tool Implementation and Integration
• Deploy, configure, administer, and optimize enterprise security solutions, including CrowdStrike, Splunk, Rapid7, and Red Canary.
• Integrate and maintain security technologies supporting endpoint protection, threat detection, vulnerability management, and security monitoring.
• Troubleshoot security platforms and ensure their effective operation across cloud environments.
• Threat Detection and Incident Response
• Investigate security alerts, analyze potential threats, and identify suspicious activity across cloud infrastructure.
• Support incident response activities, including threat analysis, containment coordination, and remediation planning.
• Develop and implement corrective measures to reduce organizational exposure to cybersecurity risks.
• Container and Infrastructure Security
• Implement security controls for containerized environments using Kubernetes, Docker, and AWS Bottlerocket.
• Perform container hardening, vulnerability assessments, and runtime protection activities.
• Promote secure container configurations, deployment practices, and infrastructure security standards.
• Vulnerability Management and Security Automation
• Identify, assess, prioritize, and remediate vulnerabilities across cloud and hybrid environments.
• Develop scripts, automated workflows, and repeatable processes to improve security operations and minimize manual intervention.
• Support continuous improvements in security monitoring, vulnerability management, and operational efficiency.
• Cross-Functional Collaboration
• Work closely with cloud architects, DevOps engineers, infrastructure specialists, and security operations teams.
• Integrate security requirements into cloud deployments and infrastructure development processes.
• Participate in security assessments and recommend improvements to strengthen the organization's overall security posture.
• Operational Support
• Maintain flexible availability aligned with U.S. time zones.
• Provide occasional evening, overnight, or weekend coverage when required for security incidents, operational needs, or project deadlines.
• Collaborate effectively with geographically distributed technical and security teams.

Requirements:

• At least 3 years of hands-on experience in cloud security, cybersecurity engineering, or infrastructure security.
• Demonstrated experience securing Amazon Web Services (AWS) and/or Microsoft Azure environments.
• Strong understanding of AWS and Azure security services, identity and access management (IAM), network security, encryption, logging, and cloud configuration best practices.
• Practical experience deploying, administering, integrating, or troubleshooting enterprise security platforms, preferably CrowdStrike, Splunk, Rapid7, or Red Canary.
• Working knowledge of containerization and container security, particularly Kubernetes and Docker.
• Understanding of container vulnerability scanning, workload protection, runtime security, and secure configuration practices.
• Experience identifying and investigating security threats, analyzing vulnerabilities, implementing remediation strategies, and supporting incident response in cloud or hybrid environments.
• Strong technical troubleshooting and analytical problem-solving skills.
• Experience with scripting and automation using Python, PowerShell, or Bash.
• Familiarity with infrastructure-as-code technologies such as Terraform or AWS CloudFormation.

Preferred Qualifications:

• Experience securing Google Cloud Platform (GCP) environments, including cloud-native security services and cross-cloud security integrations.
• Advanced hands-on experience securing Kubernetes clusters, Docker workloads, and AWS Bottlerocket environments.
• Knowledge of container runtime protection, CI/CD security integrations, and cloud-native application security.
• Additional expertise in identity security, AI/ML security, SaaS application security, Zero Trust architecture, or Cloud-Native Application Protection Platforms (CNAPP).
• Relevant professional certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, Certified Kubernetes Security Specialist (CKS), CISSP, or CCSP.
• Ability to work flexible hours aligned with U.S. time zones, including occasional evening, overnight, or weekend availability.
• Strong communication and collaboration skills, with the ability to work effectively across geographically distributed technical teams.
• High levels of initiative, adaptability, professionalism, and commitment to continuous learning.

Benefits:

• Competitive compensation: Attractive salary package, paid twice monthly.
• Healthcare coverage: Comprehensive medical insurance, with 100% of medical premiums covered by the employer.
• Retirement savings: 401(k) plan with a 100% company match on the first 4% of eligible contributions.
• Paid time off: Three weeks of PTO starting from the first year of employment.
• Paid holidays: 11 paid holidays annually.
• Family support: Paid maternity and paternity leave.
• Remote work support: Monthly reimbursement for cell phone and home internet expenses.
• Professional development: Financial support and investment in training programs and industry certifications to strengthen technical expertise.
• Business development incentives: Companywide incentive programs rewarding contributions to new business opportunities.
• Knowledge-sharing incentives: Additional recognition for contributions such as white papers, blog posts, and internal webinars.
• Work flexibility: Remote, part-time working arrangement within the United States.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.