Cloud Security Engineer

Apex Technology, Inc.•Los Angeles, CA

2d•$150,000 - $200,000•Onsite

About The Position

Apex is seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, Department of Defense, and intelligence community missions. The position protects classified and sensitive data across AWS, Azure, and hybrid or multicloud infrastructures while supporting compliance with federal standards, including NIST 800-53, FedRAMP, RMF, and DoD Impact Levels. The role also supports other relevant compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, and GDPR/CCPA. The engineer will build secure cloud architectures, manage cloud identity and security services, deploy monitoring and threat-detection tools, conduct security reviews, and maintain compliance documentation. The position works closely with DevSecOps, infrastructure, development, and configuration management teams to integrate security into cloud designs, CI/CD pipelines, and infrastructure-as-code practices, as well as to support incident response and secure modernization efforts. This role requires on-site work five days a week at Apex’s Playa Vista, California office. Applicants must be U.S. citizens according to the role requirements. Apex describes its workplace as an in-person, collaborative environment and offers full-time employees equity, healthcare coverage, paid time off, retirement matching, and other benefits.

Requirements

U.S. citizenship.
Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or at least five years of equivalent professional experience in cloud security engineering.
Five to nine or more years of cloud security engineering experience, with hands-on work in AWS GovCloud, Azure, Google Cloud, or multicloud environments.
Strong analytical, problem-solving, communication, and collaboration skills, and ability to work in fast-paced, mission-critical environments.
Deep knowledge of cloud platforms such as AWS GovCloud and Azure Government, IAM/RBAC, encryption, network security, and cloud-native security services.
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools such as Terraform and Python scripting.
Experience with compliance frameworks including NIST, FedRAMP, and RMF, and tools such as Azure Sentinel, Nessus, Burp Suite, Microsoft Defender, or AWS equivalents.
Deep understanding of network security, encryption, logging and monitoring, and container/Kubernetes security.
Experience with infrastructure-as-code, scripting such as Python or PowerShell, and security automation tools.
Ability to work on-site five days a week in Playa Vista, California.

Nice To Haves

Certifications such as CISSP, AWS Certified Security – Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance & Identity, Security+, CEH, or CSSP-related certifications such as CySA+ or GCIH.

Responsibilities

Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying least privilege, encryption, network segmentation, and data-protection practices.
Implement and maintain cloud security frameworks and ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and SCCA requirements.
Configure and manage IAM, RBAC, JIT access, Key Vaults, and Zero Trust Architecture principles across cloud environments.
Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and Elastic SIEM platforms.
Conduct vulnerability assessments, penetration-testing simulations, security configuration reviews against STIGs, CIS benchmarks, and NIST controls, and continuous monitoring of cloud resources.
Develop, maintain, and update System Security Plans, Security Assessment Reports, Plans of Action & Milestones, and risk and compliance reporting for cloud operations.
Identify, analyze, and respond to indicators of compromise, threat intelligence, and cloud security incidents; perform root-cause analysis and implement preventive controls.
Perform periodic security reviews and audits of Azure, AWS, and hybrid cloud environments to sustain compliance, mitigate threats, and update policies and procedures.
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate controls, and support secure cloud migrations and modernization.
Assess cloud architectures, recommend security improvements, review designs, and provide subject-matter expertise on cloud security tools, processes, and best practices.
Coordinate with configuration management teams to ensure hardware and software changes adhere to security protocols, maintain version control, and support cyber-terrain documentation.
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails supporting secure CI/CD pipelines and infrastructure-as-code practices.
Monitor cloud environments, investigate security alerts, perform root-cause analysis, and coordinate incident response activities.
Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.
Provide engineering teams with guidance and training on secure cloud design patterns and best practices.
Work on-site at the Playa Vista office five days a week.

Benefits

Equity in Apex and long-term incentives in the form of stock options.
Company-paid medical, dental, and vision coverage for the employee and dependents.
$100,000 life insurance at no cost.
Starting vacation allowance of 15 days, growing to more than 20 days annually.
10 paid holidays.
401(k) plan with a 100% match on the first 3% of contributions and a 50% match on the next 2%.
Eight weeks of paid parental leave.
Childcare reimbursement up to $350 per day for work-related travel.
Daily catered lunch and unlimited snacks.
Office socials, pickleball tournaments, run club, and gatherings for employees and families.
Tools for an employee’s desk setup.
In-person collaboration at the Playa Vista office, with flexibility to integrate work and life.