Senior Cloud Security Engineer - hybrid Richmond, VA

Novalink Solutions LLC•Richmond, VA

18h•Hybrid

About The Position

VDOT is seeking an experienced Senior Cloud Security Engineer to implement and support the agency’s cloud and computing infrastructure. The position serves as a subject matter expert supporting VDOT’s enterprise Azure migration and is responsible for architecting, implementing, and securing cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks. The Senior Cloud Security Engineer assists with the design, implementation, security, monitoring, and continuous improvement of VDOT’s enterprise cloud infrastructure and services. The role provides senior-level technical leadership in cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance. The engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards. The position is hybrid in Richmond, Virginia.

Requirements

At least 8 years of enterprise cloud experience.
At least 5 years of enterprise cloud security experience.
Highly experienced cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering.
Highly experienced in cybersecurity, networking, identity, security operations, and cloud engineering.
In-depth experience moving between strategic architecture and hands-on engineering and identifying security risks.
In-depth experience designing practical solutions, implementing controls, and working with infrastructure teams.
In-depth experience working with application teams to continuously improve an organization’s cloud security posture.
Experience setting up Network Security Groups (NSGs), resource manager and management groups, monitoring, and log analytics.
Experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks, and network segmentation.
Experience in incident response, security investigations, log analysis, threat intelligence, security monitoring, and IOC analysis.
Experience coordinating during cyber incidents.
Experience in vulnerability management, remediation tracking, and vulnerability scanning tools such as Nessus, Tenable, or Defender.
Experience securing enterprise cloud environments and implementing security controls in production environments.
Experience with SIEM products such as Splunk, Microsoft Sentinel, and CNAPP.
Experience with log management, security analytics, SOC integration, threat detection, and threat hunting.
Hands-on expertise validating indexer parsers and using Splunk Query Language for monitoring and data analysis.
Experience collaborating with security governance teams and application leads to implement enterprise log management standards.
Experience with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles.
Experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization.
Experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM).
Experience with Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP).

Responsibilities

Identify cloud security vulnerabilities; assess risk based on business impact; prioritize and track remediation; and validate corrective actions.
Lead complex cloud security initiatives, provide technical direction to engineers, and assist in designing secure cloud architecture for complex enterprise environments.
Influence architecture and security decisions, prevent insecure configurations from reaching production, and implement security gates within deployment pipelines.
Explain complex security risks to non-technical stakeholders.
Assess cloud security risks and gaps, recommend remediations, create and maintain security documentation and evidence, and support audits and assessments.
Review proposed cloud solutions for security risk and define appropriate security and compensating controls.
Develop Azure policies to enforce standardization and compliance with enterprise requirements, and create Azure Automation runbooks to support incident response workflows.
Monitor security events using SIEM technologies and coordinate incident response activities with VDOT’s SOC team.
Identify and diagnose system problems and threats using system logs, line monitors, SIEM, diagnostic software, and test equipment.
Lead investigation and containment of cloud security incidents.
Review firewall and NSG rule requests and ensure compliance with security standards.
Provide documentation, architecture topology diagrams, IP schemes, and access controls when required.
Work independently on assigned projects.
Collaborate with security governance teams and application leads to implement enterprise log management standards.
Coordinate during cyber incidents and support threat detection, threat hunting, security investigations, log analysis, threat intelligence, and IOC analysis.
Set up and support Azure cloud security capabilities, including Network Security Groups, resource manager and management groups, monitoring and log analytics, Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks, and network segmentation.
Support vulnerability management, remediation tracking, scanning, cloud risk assessment and prioritization, attack surface management, CSPM, CWPP, and CNAPP.
Validate indexer parsers and use Splunk Query Language for monitoring and data analysis.