Technology

Senior Cloud Security Engineer

Dia Software SolutionsMechanicsville, VA🇺🇸United StatesPosted Oct 19, 2026

Quick Overview

Seniority

Mid Senior

Work mode

Hybrid

Location

Mechanicsville, VA, United States

Posted

17 hours ago

SplunkAzureWAFZero Trust

Job Description

Hi,

Greetings from DIA SOFTWARE SOLUTIONS LLC!

We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position?

Direct client Req:: Need Senior Cloud Security Engineer ,Hybrid,VA

PLEASE SEND THE RESUMES TO SKUMAR AT DIASOFTWARESOLUTIONS DOT COM !

Job Description:

The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

Key Responsibilities:

Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments
Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
Explain complex security risks to non-technical stakeholders
Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
Monitor security events using SIEM technologies and work with VDOT s SOC team to coordinate incident response activities.
Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
Lead investigation and containment of cloud security incidents.
Review firewall and NSG rule requests and ensure compliance with security standards.
Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.
Must have the ability to work independently on assigned projects.

Fill the above skills in the below box and have consultant to complete

SKILLS MATRIX

Skill	Required	Amount of Experience	Experience
Enterprise Cloud Experience	Required	8 Years
Enterprise Cloud Security Experience	Required	5 Years
Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering	Required
Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency	Required
Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks	Required
Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams	Required
Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture	Required
Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics,	Required
Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation.	Required
Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis	Required
Candidate must have experiences coordinating during cyber incidents	Required
Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender)	Required
Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments	Required
Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP),	Required
Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting	Required
Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis.	Required
Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards.	Required
Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles	Required
Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization	Required
Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM)	Required
Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP)	Required
Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements	Required
Candidate must have experience creating Azure Automation runbooks to support incident response workflows.	Required
Candidate must have experience with Identity and access management (IAM), Role-based Access control (RBAC), and Privileged Access Management (PAM)	Required
Candidate must have experience with Least-privilege access and multi-factor authentication	Required
Candidate must have experience working in highly regulated environments with large government agencies or similar regulatory environments.	Required
Candidate must have ability to communicate technical issues to technical, non-techical, and executive audiences.	Required
Candidate must have ability mentor junior engineers.	Required
Required: Azure Security Engineer Associate, Security+, Certified Cloud Security Professional certifications	Required
Preferred: CCSP, Designing Microsoft Azure Infrastructure (AZ-305)	Desired

DIA SOFTWARE SOLUTIONS LLC.

SANGEETHA| DIA SOFTWARE SOLUTIONS LLC.

Direct: Five One Two Six Eight Six Zero Two Four Nine

DIA SOFTWARE SOLUTIONS is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All Dia soft staff must be able to demonstrate the legal right to work in the United States. DIA SOFTWARE SOLUTIONS is an E-Verify employer