About Workstreet

At Workstreet, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of frameworks, including SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP---empowering companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

The Opportunity

We are seeking a Cloud Security Engineer to help clients design, implement, and maintain security controls that meet compliance and security requirements. This role is ideal for professionals with hands-on experience in cloud security engineering, compliance frameworks, and cloud-based security best practices. You’ll work closely with clients and internal teams to strengthen their cloud security posture and automate security operations across AWS, GCP, and Azure environments.

What You'll Do

• Implement Cloud Security Controls: Apply and maintain security best practices across AWS, GCP, and Azure to ensure alignment with compliance and regulatory standards.
• Assess Cloud Environments: Evaluate client infrastructures to identify security risks, misconfigurations, and vulnerabilities, providing targeted remediation recommendations.
• Deploy and Manage Security Tools: Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture.
• Support Compliance Initiatives: Contribute to SOC 2, ISO 27001, and HIPAA efforts through control implementation, testing, and evidence validation.
• Automate Security Operations: Develop and manage infrastructure-as-code (IaC) scripts to streamline and enforce consistent cloud security controls.
• Conduct Cloud Security Reviews: Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices.
• Collaborate with Engineering Teams: Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle.
• Assist in Incident Response: Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity.
• Communicate with Clients: Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

Who You Are

• Hands-on experience securing AWS, GCP, or Azure environments.
• Strong understanding of cloud security principles, IAM, network security, and compliance controls.
• Proficiency in security automation using tools like Terraform, AWS CloudFormation, Python, or Bash.
• Working knowledge of compliance frameworks such as SOC 2, ISO 27001, GDPR, or HIPAA.
• Experience with Microsoft security and identity ecosystem, including Azure, Microsoft Entra (Azure AD), EDR, MDM, and VDI environments.
• Excellent troubleshooting and problem-solving abilities.
• Strong written and verbal communication skills in English.
• Ability to manage multiple client projects and interact directly with US-based clients.

Nice to Have 

• Experience with SIEM, IDS/IPS, vulnerability management, and log analysis tools.
• Relevant cloud security certifications (e.g., AWS Certified Security – Specialty, GCP Security Engineer, CISSP, CISM, or CISA).
• Familiarity