Senior Cloud Security Engineer

Peraton•,

4d•$135,000 - $216,000•Remote

About The Position

Peraton is seeking a Senior Cloud Security Engineer to lead proactive threat hunting, vulnerability analysis, and remediation across a growing multi-cloud environment supporting more than 70 customer tenants. The engineer will investigate potential compromise by developing and testing threat hypotheses and correlating vulnerability, configuration, and log data, then drive findings through verified remediation. The role calls for strong analytical and investigative skills, attention to detail, and effective written and verbal communication. The engineer will work closely with customers, internal engineering and patching teams, and ISSOs/ISSMs to identify threats early, accurately prioritize risk, and complete and document remediation. This is a remote position, but the employee must reside and perform all work within the United States. The required online work hours are 8:00 AM to 5:00 PM Eastern.

Requirements

Bachelor’s degree and 12 years of experience, or a Master’s degree and 10 years of experience, or an Associate degree and 14 years of experience, or a high school diploma/equivalent and 16 years of experience.
Must be a U.S. citizen and able to obtain and maintain a DHS Public Trust.
At least 8 years of information security experience, including at least 5 years in cloud security engineering.
Hands-on security experience in at least three of AWS, Azure, GCP, and OCI.
Expertise with Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus) for vulnerability scanning, analysis, and reporting.
Demonstrated experience conducting threat hunts and investigations using the MITRE ATT&CK framework.
Proficiency writing queries and analyzing logs in a SIEM or log platform such as Splunk, Microsoft Sentinel, Elastic, or equivalent.
Experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services.
In-depth understanding of cloud identity and access management, network security, encryption, and logging architecture.
Scripting or automation experience in Python, PowerShell, or Bash, and familiarity with infrastructure-as-code such as Terraform or Ansible.
Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls.
Effective written and verbal communication skills.
Must reside and perform all work within the United States.
Must work online from 8:00 AM to 5:00 PM Eastern.

Nice To Haves

One or more relevant certifications, such as CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer.

Responsibilities

Plan and conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI, using threat intelligence and the MITRE ATT&CK framework to identify activity not detected by automated tools.
Analyze cloud-native telemetry and SIEM data to investigate suspicious activity.
Administer and optimize Qualys and Tenable scanning across cloud tenants, including scan policies, agent and connector deployment, asset coverage, and credentialed scanning.
Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation based on exploitability, asset criticality, and exposure, including CISA Known Exploited Vulnerabilities.
Lead remediation of threats and vulnerabilities with engineering and patching teams, and verify closure through rescanning.
Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations.
Develop and tune detection rules, queries, and automated hunt playbooks so successful hunts become repeatable detections.
Support incident response as a senior technical resource, including scoping, containment recommendations, and root cause analysis.
Produce hunt reports, remediation tracking, and POA&M inputs, and brief customers, ISSOs/ISSMs, and leadership on findings and risk.
Mentor junior security engineers in threat hunting techniques, vulnerability analysis, and tool usage.