Sr. Cloud Security Engineer (Remote)

The Sr. Cloud Security Engineer (Sr. CSE) is a hybrid cloud and security engineering role responsible for the hands-on remediation of infrastructure and cloud vulnerabilities, ensuring cloud and infrastructure resources maintain compliance with established policies and Minimum-Security Baselines (MSBs), and reporting the organization's current compliance posture. The Sr. CSE will partner with the Security team to define, author, and maintain cloud security policies - keeping pace with evolving industry trends and regulatory requirements. This role will also actively participate in audit activities, including evidence gathering, reporting, and cross-functional collaboration with Compliance, Legal, and IT teams. 

 

Duties & Responsibilities: 

Vulnerability Remediation & Security Operations 

• Perform hands-on remediation of infrastructure and cloud vulnerabilities, driving issues to closure within established SLAs and policy requirements 

• Operate and administer vulnerability management and cloud security posture management (CSPM/DSPM) tooling - managing scan coverage, remediating findings, and reporting on SLA adherence 

• Identify, prioritize, and remediate cloud misconfigurations and security posture gaps across the organization's Azure subscriptions and infrastructure 

• Implement and validate security controls across cloud-native services, IaaS, PaaS, and container-based workloads 

• Maintain and enforce secure configurations across firewalls, network security components, application delivery infrastructure, and compute platforms in partnership with the Security Team 

• When needed, assist with privileged credential hygiene, certificate lifecycle, and secrets governance across the environment 

• Support the hardening of Windows and Linux server environments through configuration management and compliance-as-code practices 

• Maintain awareness of known and emerging vulnerabilities across the full technology stack - cloud services, OS platforms, network components, and application runtimes 

 

 

Compliance, Policy & Reporting 

 

• Monitor and report the organization's compliance posture against established security policies, baselines, and regulatory frameworks 

• Partner with the Security team to define, author, and maintain cloud and infrastructure security policies - keeping pace with evolving industry trends and regulatory requirements 

• Review and update existing policies on a regular cadence to reflect changes in the cloud environment and threat landscape 

• Produce accurate, timely compliance posture reports for leadership - covering baseline adherence, vulnerability SLA performance, and remediation progress 

• Coordinate and assist in evidence collection and audit maintenance for internal and external organizational assessments, including regulatory audits and third-party risk reviews 

• Respond to findings from audits, security questionnaires, and internal/external scanning or penetration testing 

 

CI/CD Pipeline & Infrastructure Security 

 

• Partner with Software Engineering and App Security  teams to embed security into CI/CD pipelines and deployment workflows - including secret scanning, least-privilege deployment