Senior Cloud Security Engineer

Senior Cloud Security Engineer
Mechanicsville,Virginia
Hybrid
Key Responsibilities

• Design Secure Systems: Assist in designing secure cloud architectures for complex enterprise environments, reviewing proposed cloud solutions for security risks, and defining appropriate security and compensating controls.

• Prevent Insecure Deployments: Influence architecture and security decisions to prevent insecure configurations from reaching production by implementing security gates within CI/CD deployment pipelines.

• Policy & Automation: Develop Azure policies to enforce standardization and compliance with enterprise requirements, and create Azure Automation runbooks to support incident response workflows.

• Network Security: Review and approve firewall and Network Security Group (NSG) rule requests to ensure strict compliance with organizational security standards.

• Identify & Remediate Vulnerabilities: Identify cloud security vulnerabilities and assess risks based on business impact; prioritize, track, and validate corrective actions through to resolution.

• Gap Analysis: Assess cloud security risks and operational gaps, recommending appropriate remediations to strengthen the security posture.

• SIEM Monitoring & Investigation: Monitor security events using SIEM technologies, analyze system logs, and diagnose threats using diagnostic tools and line monitors. Lead the investigation, containment, and mitigation of cloud security incidents.

• SOC Collaboration: Coordinate closely with the Security Operations Center (SOC) team to align incident response activities and share threat intelligence.

• Technical Leadership: Lead complex cloud security initiatives, provide technical direction to engineers, and operate independently on assigned high-priority projects.

• Non-Technical Communication: Translate and explain complex security risks and technical concepts clearly to non-technical stakeholders and business leaders.

• Documentation & Audits: Create and maintain comprehensive security documentation, architecture topology diagrams, IP schemes, access controls, and audit evidence to fully support internal and external assessments.