Top Cloud Security Engineer Jobs

Design, implement, and maintain cloud security controls and Policy/IaC (Terraform) for Azure/AWS. Use CSPM tooling (Wiz, Defender), perform security assessments, incident response, and collaborate with security champions to enforce compliance (CIS, NIST 800-53).

Hands-on cloud security engineer responsible for vulnerability discovery, triage, and remediation across AWS, Azure, and GCP. Operate and tune security tooling (CSPM, scanners, WAF), perform security architecture reviews, support Secure SDLC, automate validation and tracking, and collaborate with platform and application teams to improve vulnerability and patch management outcomes.

Hands-on cloud security engineer responsible for reviewing cloud and application designs, operating and tuning security tooling, triaging and driving remediation of cloud security findings, automating controls, supporting vulnerability management and certificate lifecycle, and collaborating with engineering and platform teams to improve cloud security posture across AWS, Azure, and GCP.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Lead secure design, deployment, and governance of cloud systems; assess and mitigate cloud risks; integrate security into CI/CD; perform threat modeling; evaluate third-party cloud tools; support incident response, audits, and regulatory compliance in a financial environment.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.

Design and implement cloud security controls across multi-cloud environments, harden Kubernetes clusters, enforce IAM and least-privilege, manage IaC security, run CSPM and container scanning, automate compliance evidence, and monitor runtime container security.

Design, implement, and maintain cloud security architecture and automation across AWS/Azure environments. Support continuous Authorization to Operate (cATO) and RMF/STIG compliance, automate security tasks and CI/CD assessments, produce security plans and A&A artifacts, and mentor team members. Collaborate with cloud infrastructure teams and stakeholders using Agile practices.

Design, implement, and validate cloud security architectures for Intelligence Community systems. Support RMF assessments, create and evaluate security documentation, advise on security doctrine, recommend tools, and implement cloud-native and IaC solutions. Work hands-on with clients to ensure compliance and secure mission-critical environments.

Design, implement, and assess cloud security architectures for Intelligence Community systems. Perform RMF assessments, validate security controls, recommend tools, implement IaC solutions, and collaborate with stakeholders to codify doctrine and ensure compliance for cloud, on-premise, and hybrid environments.

Design, implement, and assess cloud security architectures for intelligence community systems. Develop and evaluate security documentation, perform RMF assessments, recommend and deploy cloud security tools (on-prem, cloud, hybrid), and support accreditation. Collaborate with stakeholders, codify security procedures, and implement infrastructure-as-code solutions to meet mission requirements.

Design, implement, and govern cloud cybersecurity architecture across multiple domains. Automate Continuous Authorization to Operate (CATO), evaluate changes against RMF/STIG, support A&A and DevSecOps pipeline security, and mentor team members. Collaborate with cloud infrastructure teams using Agile practices to ensure continuous monitoring, verification, and compliance of cloud solutions.

Lead a team building proactive cloud security for a multi-cloud environment (AWS, GCP, Azure). Design and deliver full-stack, distributed microservices, evaluate infrastructure-as-code in real time (CloudFormation, Terraform/OpenTofu, Gears), mentor engineers, collaborate with product managers, and leverage languages and tools like JavaScript, Python, Go, Docker, Kubernetes, and Snowflake to prevent non-compliant resources at scale.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Engineer and operate enterprise EDR/XDR protections across hundreds of thousands of Windows, macOS, Linux, server, container, and multi-cloud workloads. Responsibilities include behavioral defense, allowlisting, phased deployments, threat investigation, host forensics, live remediation, SOC escalation support, attack simulation, and continuous measurement of endpoint coverage and control efficacy. The role also partners with application owners and IT operations to minimize business disruption while automating security policies and fleet-wide remediation.

Lead cross-functional initiatives to mature cloud and enterprise detection infrastructure, including telemetry pipelines, detection-as-code, logging, and scalable coverage. Design and tune detections for cloud, identity, endpoint, SaaS, CI/CD, and service-to-service threats. Conduct threat hunting, support incident response and on-call operations, apply threat intelligence and adversary emulation, mentor SOC engineers, and improve detection capabilities based on incident lessons learned.

Designs, deploys, and integrates secure Google Cloud Platform and Microsoft Azure environments with existing infrastructure. Implements cloud-native security controls, monitors compliance, investigates and remediates complex security incidents, automates controls through CI/CD pipelines, and enforces regulatory requirements. The role also evaluates cloud security tools, documents best practices, collaborates with technical teams, and mentors junior security staff.

Design and embed product security for connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, updates, identity, key management, HSM). Integrate security into SDLC/CI-CD, lead V&V activities (pen testing, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA, IEC 81001-5-1, ISO 14971, and NIST guidance.

Lead design and implementation of deploy-time policy-as-code controls across AWS, Azure, and GCP using OPA/Rego and Regula; translate baselines into enforceable Terraform-integrated policies; build reusable libraries, testing strategies, and CI/CD enforcement; lead and mentor a team delivering secure IaC and pipeline controls at enterprise scale.

Lead design and delivery of Agentic AI IAM and secrets management across hybrid environments. Build secure authentication/authorization, centralized secrets vaulting, automated rotation, governance, monitoring, and operational metrics. Partner with infrastructure, cloud, DevOps, application, and risk teams to implement Zero Trust, machine identity security, and AI agent safeguards while driving enterprise program execution and compliance.

Design and build cloud-native security governance and platform capabilities for AWS-based infrastructure. Implement automated security auditing, threat detection, access control, host and container security, and collaborate with engineering and operations to embed and improve platform security posture.

Lead design and implementation of security controls for AI and cloud platforms, configure DLP and alerting, detect and remediate misconfigurations, perform AI security assessments, document findings, and advise clients and presales on AI security best practices.

Design, build and secure cloud-native platforms by developing automated IaC solutions, driving secure-by-design architecture, automating compliance, mentoring engineers, and improving enterprise security visibility and resilience.

Design, build, and scale HSM-backed cryptographic and key-management services for large-scale cloud environments. Implement PKI, TLS, client-side encryption, TEEs, and Confidential VMs. Integrate identity (OAuth/SAML/Keycloak) and secure Google Workspace services. Ensure cryptographic lifecycle, compliance (FIPS), high availability, and support secure deployments across cloud APIs, OS, and hardware.