Cloud Security Specialist
About The Position
The Cloud Security Specialist supports the day-to-day execution of the organization’s cloud security program across Microsoft Azure and Amazon Web Services. This growth-oriented role is suited to a candidate with foundational to intermediate cybersecurity, cloud, or DevOps experience. The specialist monitors cloud security controls, secures identity and access, reviews cloud and network architecture, integrates security into deployment pipelines, protects cloud-hosted data, and coordinates remediation with Information Security, Infrastructure, and Application Development. The role includes cloud security operations and posture management; identity and access management; cloud architecture and network security; secure cloud engineering and DevSecOps; cloud data security; monitoring and incident response; and cloud risk, compliance, and reporting. The specialist investigates and documents findings, supports remediation and incident response, maintains security dashboards and inventories, contributes to risk assessments and audits, and prepares metrics and documentation for leadership. The position reports to the Manager, Active Defense & Security Operations.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent work experience in lieu of a degree is considered.
- Two or more years of experience in cybersecurity, network security, DevSecOps, or related work.
- Three to five years of hands-on experience administering Microsoft Azure and/or Amazon Web Services.
- Working knowledge of cloud security, identity and access management, RBAC, cloud networking, encryption, logging, and secure configuration.
- Experience reviewing infrastructure as code, deployment pipelines, containers, or cloud-hosted applications.
- Strong analytical, troubleshooting, documentation, communication, and teamwork skills.
Nice To Haves
- Experience with Microsoft Entra ID, Microsoft Defender for Cloud, AWS Security Hub, AWS GuardDuty, SIEM, or comparable cloud security tools.
- Experience with Azure DevOps pipelines, Git, and policy as code (Azure Policy, AWS SCPs, AWS Config).
- Experience with landing zones, hub-and-spoke design, cloud WAF, CASB, API security, and Azure CAF or AWS Well-Architected Framework.
- Experience with Microsoft Purview, Fabric, and Copilot governance; identity protocols (OAuth 2.0, OIDC, SAML, PKI).
- Container security experience (Docker, Kubernetes) and scripting in Python or PowerShell.
- Security+, Microsoft Azure Security Engineer Associate (AZ-500), AWS Certified Security – Specialty, or equivalent certification.
- Familiarity with NIST CSF, CIS Controls, ISO 27001/2, PCI-DSS, SOX, HIPAA, GDPR, GLBA, CNAPP/CWPP concepts, EDR/MDR, and Linux and Windows administration.
Responsibilities
- Monitor Azure and AWS environments for misconfigurations, vulnerabilities, policy violations, suspicious activity, and drift from CIS Benchmarks and approved baselines.
- Administer and tune cloud security posture management and cloud-native security services, including Microsoft Defender for Cloud, AWS Security Hub, and AWS GuardDuty.
- Investigate cloud security alerts, document findings, coordinate remediation with system and application owners, and escalate high-risk findings to senior staff.
- Maintain cloud security dashboards, asset inventories, and landing zone usage and reporting.
- Support Azure and AWS identity controls, including Entra ID, IAM, RBAC, least privilege, multifactor authentication, conditional access, and privileged access management.
- Review roles, service principals, managed identities, access keys, and excessive or inactive access; support identity federation and SSO.
- Support secure landing zone design, hub-and-spoke topology, environment separation, and network zoning.
- Support secure configuration of load balancers, gateways, cloud WAF, CASB, and API security controls.
- Review proposed cloud architectures for sound security design and escalate design concerns to senior staff.
- Integrate security requirements into deployments and review infrastructure-as-code and configurations for security risks.
- Support security scanning, secrets detection, and policy checks in Azure DevOps pipelines.
- Implement and maintain security policy as code using Azure Policy, AWS Service Control Policies, and AWS Config rules.
- Support secure configuration of storage, databases, encryption, secrets, and key management.
- Support data classification, labeling, and DLP with Microsoft Purview, and governance controls for Microsoft Fabric and Copilot, including oversharing risk.
- Ensure cloud audit, security, and data access logs reach security monitoring platforms; support investigations, triage, and documentation for cloud-related incidents.
- Support risk assessments, audit evidence collection, and assessment of cloud controls against applicable standards and regulatory requirements.
- Prepare cloud security metrics and reports for leadership; document standards, procedures, diagrams, and exceptions.
- Participate in security awareness, tabletop exercises, and training; perform other duties as assigned.
Benefits
- Ongoing job development and support in all roles.
- Paid training and continuing education reimbursement.
- Medical and dental insurance available on the first day.
- Generous employee 401K contribution.
- Excellent paid time off (PTO) plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
