The Role
Leads the architecture, implementation, monitoring, and continuous improvement of secure Azure cloud environments. Responsibilities include vulnerability and risk management, identity and network security, Azure policy and automation, SIEM monitoring, threat detection, incident investigation and containment, security governance, compliance, audit support, and collaboration with engineering, application, SOC, and infrastructure teams.
Summary Generated by Built In
VDOT is seeking an experienced Senior Cloud Security Engineer (Sr CSE) to implement and support the agency’s cloud and computing infrastructure. The Senior Cloud Security Engineer will serve as a subject matter expert supporting VDOT’s enterprise Azure migration, responsible for architecting, implementing, and securing cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks.
The Senior Cloud Security Engineer will be responsible for assisting in the design, implementation, securing, monitoring, and the continuous improvement of VDOT’s cloud infrastructure and services across the enterprise. The position provides senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance.
The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.
Key Responsibilities:
• Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
• Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments
• Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
• Explain complex security risks to non-technical stakeholders
• Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
• Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
• Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
• Monitor security events using SIEM technologies and work with VDOT’s SOC team to coordinate incident response activities.
• Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
• Lead investigation and containment of cloud security incidents.
• Review firewall and NSG rule requests and ensure compliance with security standards.
• Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.
• Must have the ability to work independently on assigned projects.
Requirements
Skill
Required / Desired
Amount
of Experience
Enterprise Cloud Experience
Required
8
Years
Required
8
Years
Enterprise Cloud Security Experience
Required
5
Years
Required
5
Years
Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering
Required
Required
Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency
Required
Required
Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks
Required
Required
Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams
Required
Required
Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture
Required
Required
Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics,
Required
Required
Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation.
Required
Required
Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis
Required
Required
Candidate must have experiences coordinating during cyber incidents
Required
Required
Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender)
Required
Required
Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments
Required
Required
Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP),
Required
Required
Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting
Required
Required
Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis.
Required
Required
Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards.
Required
Required
Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles
Required
Required
Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization
Required
Required
Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM)
Required
&n
Required
&n
Skills Required
- At least 8 years of enterprise cloud experience
- At least 5 years of enterprise cloud security experience
- Highly experienced cloud security professional with hands-on cloud infrastructure and cloud engineering expertise
- Strong experience in cybersecurity, networking, identity, security operations, and cloud engineering
- Experience moving between strategic architecture, hands-on engineering, and security risk identification
- Experience designing practical security solutions, implementing controls, and working with infrastructure teams
- Experience working with application teams to improve cloud security posture
- Experience configuring Azure Network Security Groups, resource manager, management groups, monitoring, and log analytics
- Experience configuring Azure Firewall, Azure WAF, Azure Monitor, Application Gateway, virtual networks, and network segmentation
- Experience with incident response, security investigations, log analysis, threat intelligence, security monitoring, and IOC analysis
- Experience coordinating cyber incident response
- Experience with vulnerability management, remediation tracking, and vulnerability scanning tools such as Nessus, Tenable, or Defender
- Experience securing enterprise cloud environments and implementing production security controls
- Experience with SIEM products such as Splunk, Microsoft Sentinel, or CNAPP
- Experience with log management, security analytics, SOC integration, threat detection, and threat hunting
- Hands-on experience validating indexer parsers and using Splunk Query Language for monitoring and data analysis
- Experience collaborating with security governance teams and application leads on enterprise log management standards
- Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles
- Experience with cloud vulnerability management, remediation tracking, risk assessment, and prioritization
- Experience with cloud risk assessment, attack surface management, and Cloud Security Posture Management
- Experience with Cloud Workload Protection and Cloud-Native Application Protection Platforms
Similar Jobs
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Novalink Solutions LLC is a global consulting, engineering, and AI product development company specializing in information technology and telecommunications. They provide AI-powered products, automation platforms, intelligent workflow systems, IT consulting, managed engineering, and staff augmentation services.
