Senior Cloud Security Engineer
- Esvee Technologies Inc.
15 Hours Ago
NA
W2, C2C
Mechanicsville-VA
5-10 Years
Required Skills: Cloud Security Engineer, Azure Firewall, Microsoft Azure, Security Information and Event Management, SIEM, Splunk, National Institute of Standards and Technology, NIST
Job Description
| Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering | Required |
| Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency | Required |
| Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks | Required |
| Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams | Required |
| Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture | Required |
| Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics, | Required |
| Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation. | Required |
| Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis | Required |
| Candidate must have experiences coordinating during cyber incidents | Required |
| Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender) | Required |
| Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments | Required |
| Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP), | Required |
| Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting | Required |
| Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis. | Required |
| Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards. | Required |
| Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles | Required |
| Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization | Required |
| Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM) | Required |
| Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP) | Required |
| Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements |
