Senior Cloud Security Engineer (AWS & GCP)

Quantum Sky•Remote,

4d•$135,000 - $160,000•Remote

About The Position

Quantum Sky is hiring a Senior Cloud Security Engineer to join its cloud, security, and compliance team. The role focuses on day-to-day security engineering across AWS and GCP, including systems hardening, vulnerability remediation, cloud operations, and security tool management. The engineer supports Windows and Linux systems, container workloads, cloud services, identity services, and customers operating under FedRAMP, FISMA, and NIST 800-53 frameworks. Alongside regular business-hours responsibilities, this position participates in a structured after-hours 24×7 on-call rotation as a primary or backup engineer. On-call duties include responding to security alerts, infrastructure incidents, outages, and continuous monitoring events; performing triage, containment, and stabilization; escalating complex issues; documenting response actions; and improving automation and runbooks. The role is remote within the United States. Applicants must be U.S. citizens with the ability to obtain a security clearance.

Requirements

Six or more years of IT engineering and/or cybersecurity experience; the posting states at least three (4) years working in a dedicated cloud security engineering or similar position.
Hands-on experience with both AWS and Google Cloud Platform (GCP).
Ability to diagnose and resolve issues across Linux and Windows systems, network infrastructure, and cloud services.
General systems administration and vulnerability management experience, including system patching and hardening, identity and access management (IAM), and related tasks.
Experience working in a DevSecOps environment, integrating security practices into cloud and infrastructure workflows.
Familiarity with ITSM ticketing systems such as GitLab, Jira, or ServiceNow; GitLab is preferred.
Ability to work independently during business hours and on-call periods.
Strong written and verbal communication skills for customer interaction and incident documentation.
Hands-on experience with one or more of the following: Splunk Enterprise, Tenable Security Center/Nessus, Invicti/Acunetix, Appgate, Okta, GitLab, Palo Alto Networks Firewalls, TrendMicro Deep Security, Trivy, Anchore, Terraform, CloudFormation, or Ansible.
Must be a U.S. citizen with the ability to obtain a security clearance.

Nice To Haves

Bachelor's degree in Computer Science or another relevant field.
Experience supporting federal or government-facing customers or consulting engagements, ensuring compliance and operational requirements.
Experience with FedRAMP, FISMA, or NIST 800-53 compliance frameworks.
Prior on-call, SRE, SOC, or incident response experience.
Relevant AWS or Google Cloud Platform certifications.
Security+ or another relevant industry security certification.
Experience with infrastructure-as-code or automation tooling.
Experience with Kubernetes.

Responsibilities

Perform systems administration and maintenance, including patching, vulnerability and compliance scanning and remediation, backups, and recovery for cloud workloads.
Support AWS and GCP environments, including Windows and Linux virtual machines, container workloads, cloud services, and identity services.
Configure, update, and maintain tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
Troubleshoot issues across network, compute, application, and identity layers by reviewing logs, collecting data, and analyzing system behavior.
Implement hardening and compliance controls using CIS Benchmarks, DISA STIGs, and FedRAMP requirements.
Remediate vulnerabilities identified by tools such as Tenable, Trivy, OpenSCAP, Anchore, and Twistlock.
Provide quality assurance feedback during system deployments to ensure architecture meets compliance and operational requirements.
Collaborate with Security Analysts to ensure uninterrupted delivery of security services to customers.
Create and maintain network diagrams, dataflow diagrams, SOPs, and security tool configuration guides.
Support client communications, deliverables, and issue resolution.
Support and mentor junior engineers as needed.
Serve as primary or backup on-call engineer during assigned rotations.
Respond to after-hours security alerts, infrastructure incidents, outages, and continuous monitoring events.
Perform initial triage, containment, and stabilization using established runbooks.
Investigate and respond to generated alerts, escalating complex issues to senior engineers, architects, or compliance teams.
Document incidents, actions taken, and recommended improvements.
Contribute to automation improvements and runbook enhancements.