Cloud Security Engineer
Sign up free to see how well your resume matches this role.
What you'll do
- Lead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirements evolve.
- Design, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible.
- Administer relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; apply advanced networking, VPC, peering, and subnet design.
- Support the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap, engineering, and integration.
- Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP).
- Advance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity.
- Provide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.
- Provide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders.
- Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git.
- Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.
- Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
- Architect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
Description of Task to be Performed:
AnaVation is seeking a Cloud Security Engineer to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will lead zero trust engineering, interoperability, and modern security capability development across the Government enterprise. The Cloud Security Engineer will manage security systems and tools for cloud technologies, investigate and enhance existing cloud structures, and drives issue identification/resolution, integration, gap assessment, and continuous improvement, while providing flexible reach-back across the Government’s Cyber Assessment Roadmap.
Position Responsibilities: This position sets the engineering direction for the Government’s zero trust and cloud security modernization, translating roadmap objectives into deployed, measurable capability.
Responsibilities include:
- Lead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirements evolve.
- Design, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible.
- Administer relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; apply advanced networking, VPC, peering, and subnet design.
- Support the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap, engineering, and integration.
- Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP).
- Advance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity.
- Provide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.
- Provide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders.
- Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git.
- Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.
- Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
- Architect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics.
- Enforce Zero Trust through ICAM integration and micro-segmentation validation and manage enterprise security tooling.
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.