Cloud Security Operations Engineer
$118,997–$221,000 year
On-siteSan Jose, California, United States
Job Summary
Design and deploy secure reference architectures across multi-cloud environments, integrating security into Infrastructure-as-Code using Terraform, CloudFormation, and ARM Templates. Configure and maintain cloud-native security controls including VPCs, WAFs, DDoS protections, and encryption policies. Manage Identity and Access Management by auditing IAM policies, roles, and federation models while enforcing least-privilege principles and MFA. Lead incident response efforts for cloud-related security events, triage DLP alerts, and investigate potential insider threats. Develop automation scripts in Python, PowerShell, and Bash to enhance security posture and remediate misconfigurations. Continuously monitor environments using CSPM and CNAPP platforms to identify policy violations and drive remediation workflows. Collaborate with infrastructure and application teams to coordinate risk mitigation and ensure compliance with SOC 2, HIPAA, and GDPR standards.
Required Qualifications
- Deep knowledge of at least one cloud platform (AWS, Azure, or GCP)
- Proficiency in scripting: Python (preferred), PowerShell, Unix shell scripting
- Strong understanding of networking and cloud-native network security
- Experience with CSPM/CNAPP platforms such as CloudGuard Dome9, Wiz, Prisma Cloud, Microsoft Defender for Cloud, or similar solutions
- Strong knowledge of CIS Benchmarks, CSA Cloud Controls Matrix (CCM), NIST, and industry cloud security best practices
- Familiarity with securing OS and containerized environments (Docker, Kubernetes)
- Experience implementing secure cloud network architectures, private endpoints, bastion access patterns, and zero-trust security principles
- Experience supporting cloud compliance, audit readiness, and regulatory assessments
- Bachelor's degree in computer science, Information Security, or related field (or equivalent experience)
Desired Qualifications
- AWS Certified Solutions Architect – Associate
- AWS Certified Security – Specialty
- Microsoft Certified: Azure Administrator Associate
- Microsoft Certified: Azure Security Engineer Associate
- Google Cloud: Associate Cloud Engineer
- Google Cloud: Professional Cloud Security Engineer
- (ISC)2 Certified Cloud Security Professional (CCSP)
- (ISC)2 Certified Information Systems Security Professional (CISSP)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.