Start searching
Back to Jobs
Recently postedRemoteEmployeeTechnology

Cloud Security Engineer with Security Clearance

Quantum SkyWashington, DC🇺🇸United States

Why this role stands out

This remote Cloud Security Engineer role offers a unique opportunity to be at the forefront of securing a major federal client's expanding cloud infrastructure, providing significant impact and continuous learning. You'll thrive here if you possess a passion for cloud security, enjoy developing innovative solutions in a collaborative enterprise SOC environment, and are eager to grow your expertise in AWS security and incident response. Apply now to join a dynamic team and advance your career in a critical and evolving field.

Quick overview

SeniorityMid Senior
Employment typeEmployee
Work modeRemote
LocationWashington, DC, United States
AWSAzure

Job description

Responsibilities

  • Perform cloud hunting and identify embedded threats effectively and efficiently
  • Review and analyze cloud logs to bring relevance and context to the data
  • Lead cloud incident response activities as they occur
  • Develop a full set of cloud incident response playbooks
  • Work with stakeholders to ensure full visibility into workloads running in the cloud
  • Ensure all cloud logs are onboarded to the SIEM tool and the correct events are logged
  • Develop and implement a full set of monitoring use cases to enable DOJ security tools to immediately and automatically detect cloud threats
  • Continuously tune security tools for optimization, i.e., maximum blocking with minimal false positives
  • Devise and implement additional KPIs and metrics that help DOJ monitor the overall health of this function
  • Ensure and enable DOJ’s participation in threat information-sharing initiatives across the USG
  • Assist the engineering team with the deployment, configuration, and maintenance of cloud-based SOC tools, technologies, applications, and solutions
  • Perform research and lead proof of concept efforts to determine where additional technologies may be necessary
Qualifications
Required:
  • Able to work normal business hours (core) and occasional/limited on-call hours as requested by the client and/or as required by operational demands (e.g., during major incidents)
  • Willingness to work at the client site in Washington DC at least part of the time is required (hybrid/telework)
  • Eight (8) years of cyber security experience, with at least six (6) of those years working as a Cloud Security Engineer in an enterprise SOC environment
  • Demonstrated expertise in performing cyber threat hunting activities in cloud environments (e.g., SaaS, PaaS, IaaS, including O365, SIEM, EDR, and other cloud-based applications) is critically important
  • Demonstrated experience leading incident response activities when cloud-based tools and systems are involved
  • Experience across all major cloud providers (AWS, Azure, Google), with a focus on AWS
  • Bachelor’s degree required OR additional relevant experience
  • Ability to work as an integral part of a high-performing SOC team is required
  • Effective verbal and written communication skills that include the ability to describe highly technical concepts in non-technical terms
  • Understanding of recent cybersecurity policies and mandates such as EO 14028, M-21-31, NSM-8, and their impact on SOC activities
Desired:
  • Advance level Cloud Security certifications are strongly preferred (e.g.., AWS Security Specialty certification)
  • CISSP, GCIH, and similar certifications are a plus
Clearance:
  • Active Secret Clearance

Similar jobs

Apply