Top Cloud Security Engineer Jobs

Lead global cloud security architecture across AWS, Azure, or GCP, including Zero Trust, IAM, micro-segmentation, encryption, AI/ML security, policy-as-code, CNAPP/CSPM, threat modeling, and automated compliance. Develop security automation and testing within CI/CD pipelines, reduce cloud threat detection times, and advise architecture and executive leadership on security risks and regulatory requirements.

Designs, implements, and maintains cloud security controls and infrastructure, including access provisioning, monitoring, incident response, vulnerability management, and security automation. Evaluates cloud architectures, tunes security tools, develops response documentation, and partners with engineering, compliance, and leadership to improve security posture. Requires expertise in cloud and network security, programming, databases, CI/CD, Linux, SQL, and security technologies, plus a bachelor's degree and at least five years of public cloud experience.

Monitor and secure federal cloud environments across AWS, Azure, and Google Cloud. Perform cloud threat hunting, log analysis, incident response, and develop cloud security playbooks and monitoring use cases. Ensure cloud logs are integrated with SIEM tools, tune detection systems, establish KPIs, support threat information sharing, and assist with cloud SOC tool deployment and proof-of-concept efforts.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Designs, implements, and maintains security controls across Azure, GCP, and AWS environments. Manages cloud IAM, security posture, vulnerability remediation, policies, guardrails, and infrastructure security. Partners with engineering and DevOps teams on CI/CD and infrastructure-as-code security, conducts assessments, supports cloud incident response, develops SOC detection content, and documents security architectures. Requires three or more years of cloud security experience across at least two major cloud platforms.

Secures and manages enterprise Microsoft cloud environments across Azure, Office 365, and Microsoft 365. Leads Conditional Access, Defender, Purview, DLP, eDiscovery, vulnerability remediation, penetration testing, and red/blue team activities. Develops KQL queries for Sentinel and Defender detection and investigation. Advises architects, identity teams, incident responders, and cross-functional stakeholders on Zero Trust, compliance, governance, and cloud security controls.

Designs and reviews cloud security architectures across AWS, Azure, GCP, and internet-facing environments. Partners with engineering, identity, network, application, and security teams to implement Zero Trust, IAM, segmentation, perimeter, encryption, monitoring, and other controls. Evaluates risks against security standards and regulatory frameworks, documents findings and exceptions, prioritizes remediation, and promotes secure-by-design practices and consistent cloud governance across multi-cloud deployments.

Senior individual contributor owning cloud security architecture for GCP. Design edge/perimeter defenses with Cloudflare and Cloud Armor, build policy-as-code and secure Terraform modules, lead threat modeling and security reviews, advance cloud detection and incident response, translate compliance requirements into technical controls, mentor engineers, and serve as the cloud security technical authority.

Develop and evaluate cloud security architectures for Intelligence Community systems. Assess security documentation, compliance, risk thresholds, software assurance, and RMF requirements across on-premises, cloud, and hybrid environments. Support validation, assessment, accreditation, and troubleshooting activities; recommend security tools and capabilities; and collaborate with clients and technical teams in an Agile environment.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Supports Linux infrastructure and R&D researchers with a focus on cloud security. Responsibilities include cybersecurity compliance, cloud administration, automation, configuration management, patching, compute and storage deployment, container management, scripting, centralized infrastructure support, and research partnerships. The role provides hands-on onsite infrastructure support in Fort Collins and requires lifting up to 50 pounds.

Design, implement, and automate scalable cloud security solutions and baselines across AWS/Azure/GCP. Build guardrails, IAM, detection/monitoring, configuration management, and data protection using IaC (Terraform) and everything-as-code. Collaborate with Product Engineering and security teams, produce technical documentation, and operationalize security tooling.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Build, integrate, and operate cloud-native security controls across infrastructure, data platforms, applications, CI/CD pipelines, and enterprise services. Develop CSPM and DLP capabilities, detection logic, automation, and incident-response mechanisms. Integrate controls with SIEM platforms, apply infrastructure-as-code and automated testing practices, and support reliable production operations. Collaborate with platform, application, and product teams to improve cloud security effectiveness and developer adoption.

Develop Go-based microservices and REST APIs for CrowdStrike's Cloud Security Posture Management platform. Own end-to-end delivery, follow engineering best practices, use event-driven workflows (Kafka), and store data in Cassandra/Elasticsearch/Postgres. Operate production services (on-call), deploy containers in Kubernetes with Helm, and work with cloud providers and infrastructure-as-code tools to secure cloud workloads.

Administer and secure Azure Government and Microsoft 365 GCC High environments, including identity, access, cloud networking, firewalls, application delivery, and Microsoft Defender security operations. Investigate incidents, remediate vulnerabilities, troubleshoot production issues, automate tasks with PowerShell and Azure Playbooks, and improve reliability and compliance. The role supports regulated environments and may require after-hours incident response. It is an office-based position requiring residence in or commuting distance to Nashville, Tennessee.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Manage and secure AWS, Microsoft 365, cloud applications, network infrastructure, and enterprise security platforms. Monitor logs and security events, support SIEM, MDR, MFA, EDR, and data protection tools, and provide advanced IT troubleshooting. Lead security initiatives, audit preparation, regulatory compliance, policy development, and secure AI adoption while supporting regulated clinical trial operations.

Protect and harden Wolters Kluwer's centralized GenAI platform (FAB) by implementing cloud-native security controls, IAM and least-privilege practices, DevSecOps automation, vulnerability management, security monitoring, and compliance support (SOC 2, HIPAA). Collaborate with engineering and audit teams to integrate security into CI/CD pipelines, triage findings, and support incident response and audit readiness.

Design and enforce cloud security best practices, build automated monitoring and remediation tools, integrate AppSec into CI/CD, collaborate with incident response and development teams, research security technologies and prototypes, and manage vulnerability and compliance processes across cloud environments.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.