Cloud Security Assurance

Cloud Security Assurance Engineer Jobs

9 jobs found

15d ago

Cloud CyberSecurity Engineer

AECOM Dallas, TX

Dallas, TX

15d ago

Full time Cloud Platforms Cloud Security Cloud Security Assurance

Apply Now

Job Description

AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team and help enforce security outcomes across a global, multi-cloud environment. The role focuses on defining control expectations, identifying cloud risk, and partnering with Infrastructure and Application teams to drive remediation through to closure.

This position supports visibility and accountability for cloud security posture across AWS and Microsoft Azure, including Microsoft m365, while aligning efforts with enterprise security standards and governance processes.

Responsibilities

Manage Cloud Security Posture Management (CSPM) to detect and address security issues.
Use Palo Alto Prisma Cloud and Qualys TotalCloud to identify misconfigurations, vulnerabilities, and baseline deviations.
Define remediation requirements and initiate remediation work with Infrastructure and Application teams.
Track remediation progress and drive issues to closure.
Partner with Security Architecture to translate cloud security standards into actionable control requirements.
Ensure ongoing adherence to approved cloud security baselines and standards.
Support exception management and risk acceptance processes with Cybersecurity Architecture and Cybersecurity GRC.
Develop and deliver reporting on cloud security posture and risk to Cybersecurity and IT leadership.
Own visibility into cloud security posture across AWS and Azure.
Define risk metrics, prioritization models, and reporting standards.
Improve asset visibility and configuration awareness across cloud environments.
Partner with Infrastructure and Application teams to support secure control implementation.
Provide guidance on secure cloud practices aligned with enterprise standards including NIST and CIS.
Collaborate with stakeholders to prioritize and address security risks.
Support integration of cloud telemetry into enterprise logging and monitoring platforms.
Enhance visibility into cloud activity and control effectiveness.
Provide backup support for Proofpoint Email Gateway.
Assist with policy updates, tuning, and troubleshooting mail flow issues to ensure secure email operations continuity.
Drive continuous improvement of cloud security processes, tooling, and reporting.
Stay current with evolving cloud threats and technologies.

Requirements

Bachelor’s degree (BA/BS) and at least 6 years of information technology and/or cybersecurity experience with a cloud security focus, or demonstrated equivalency of experience and/or education.
Experience in AWS and Microsoft Azure environments.
Experience with CSPM/CNAPP tools including Palo Alto Prisma Cloud, Qualys TotalCloud, CrowdStrike Cloud Security, or similar.
Strong understanding of cloud security concepts, IAM, and network security.
Experience managing and driving remediation of security issues.
Strong communication and stakeholder management skills.
Experience with Proofpoint Email Protection or similar platforms.
Experience with SIEM/logging integrations.
Familiarity with Infrastructure-as-Code concepts.
Understanding of NIST, CIS, and ISO 27001.
Cloud security certifications for AWS or Azure are highly preferred.
Experience in large enterprise environments.

Technologies

AWS
Microsoft Azure
Microsoft m365
Palo Alto Prisma Cloud
Qualys TotalCloud
CrowdStrike Cloud Security
Proofpoint Email Gateway
Proofpoint Email Protection
SIEM
NIST
CIS
ISO 27001

Work Location and Schedule

Location: Dallas, TX (hybrid)
Hybrid work schedule combining in-office and virtual work, and must be based in Dallas or Houston, TX.
Relocation assistance: not available.
Work authorization sponsorship: not available for this position, now or in the future.
Day 1 onboarding: all newly hired employees must attend an in-person Day 1 onboarding at an AECOM office location as a condition of employment.

View full job page →

17d ago

Sr. Cloud and AI Security Engineer

Maxonic, Inc. Dublin, CA

Dublin, CA

17d ago

$150k - $160k/yr Full time Ai Security Application Security Application Security Posture Management

Apply Now

Job Description

Maxonic, Inc. is seeking a Senior Cloud and AI Security Engineer to design, implement, and maintain security tooling for protecting cloud workloads. This role focuses on posture management, data and application security controls, Zero Trust network capabilities, and automation to support threat remediation, with close collaboration across security governance and business teams.

Location and Work Schedule

Location: Dublin, CA (onsite)
Job type: Fulltime
Work location: In person

Salary

Compensation: USD 150,000 - 160,000 per year

Key Responsibilities

Design, implement, and maintain security tools used to monitor and protect company cloud workloads.
Identify and mitigate cloud-based security risks.
Develop and implement security controls, including container security, data security posture management, application security posture management, SaaS security posture management, and a zero trust network.
Build automation scripts to support threat remediation workflows.
Partner with Governance, Risk, and Compliance (GRC) teams to align security roadmaps with business goals.
Implement and manage posture management systems along with general cloud security capabilities, including log management, cloud-native workload protection, context-aware access policies, secure web gateways, and data security.
Collaborate with the Information Security Governance, Risk, and Compliance team to produce global cloud security technical designs, architecture standards, and maturity roadmaps.
Develop and maintain documentation, technical diagrams, and self-healing automation scripts for security tools, system environments, and cloud operations.
Act as a Subject Matter Expert (SME) and lead assessment, evangelization, and adoption of new security tools, applications, and processes across cloud security domains, including posture management, logging and monitoring, secure hybrid access solutions, data pipeline security, and AI posture management.
Understand business objectives, supporting systems, and processes across key business areas, aligning technical solutions with enterprise needs while balancing strong security controls with compatibility and operational efficiency.

Required Qualifications

Minimum 10 years of Information Security experience, including 5+ years in large enterprise environments.
Bachelor’s degree or equivalent experience; cloud security certification preferred.
Strong knowledge of security threats, detection and response, security analytics, and automation/orchestration tools.
Ability to work independently and within teams to deliver technical solutions.
Experience developing security strategies, standards, and architectures aligned with industry frameworks.
Ability to improve security posture using technical, administrative, and physical controls.
Experience collaborating with IT teams to design and implement enterprise security solutions.
Experience selecting, configuring, and implementing security tools aligned with business needs.
Knowledge of identity and access management, Zero Trust principles, and secure access solutions.
Strong documentation and communication skills to translate security requirements into actionable designs.

Education

Bachelor’s degree or equivalent experience

Relevant Technologies

Zero trust network
Container security
Data security posture management
Application security posture management
SaaS security posture management
Posture management systems
Log management
Cloud-native workload protection
Context-aware access policies
Secure web gateways
Secure hybrid access solutions
Data pipeline security
AI posture management
Automation/orchestration tools
Self-healing automation scripts
Identity and access management

Application Information

Please apply with your most current resume.
For additional details, contact Surya Prakash at surya.prakash@maxonic.com or (408) 400-2314.

Physical Requirements (ADA)

Ability to work in an office environment, primarily on a computer.
Requires sitting, standing, walking, hearing, talking on the telephone, attending in-person meetings, typing, and working with paper/files.
Consistent timeliness and regular attendance.
Vision requirements: ability to see information in print and/or electronically.

Behavioral and Leadership Competencies

People: Building Effective Teams, Developing Talent, Collaboration
Self: Leading by Example, Communicates Effectively, Ensures Accountability and Execution, Manages Conflict
Business: Business Acumen, Plans, Aligns and Prioritizes, Organizational Agility
Position-related emphasis: Strong Analytical Skills, Navigate Ambiguity, Solution oriented leadership

Additional Information

The role is onsite in Dublin, CA.

View full job page →

21d ago

Cloud Security Engineer

Deloitte Rosslyn, VA

Rosslyn, VA

21d ago

$108k - $188k/yr Full time Cloud Cloud Infrastructure Cloud Native

Apply Now

Job Description

Deloitte is hiring a Cloud Security Engineer to help strengthen security across AWS, GCP, and Microsoft Azure. This role sits on Deloitte’s Cloud Security team within Government & Public Services, supporting secure cloud adoption through architecture reviews, control implementation, monitoring, and risk reduction. You’ll work with an Enterprise Security offering that embeds security across digital transformation, helping secure technical backbones while enabling secure delivery of new capabilities.

Location: Rosslyn, VA (onsite)

Compensation: USD 107,925 - 188,000 per year

What You’ll Do

As a Cloud Security Engineer on the Cloud Security team, you will assess cloud environments and help drive improvements that reduce security risk. You will partner with engineering and operations teams to investigate security events, support remediation, and establish repeatable security practices through documentation and reporting.

Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and configuration issues.
Design, implement, and improve cloud security controls covering identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for both new and existing solutions and provide recommendations aligned to security and compliance requirements.
Investigate cloud security events and findings, analyze root causes, and support remediation activities with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field.
Active Secret Clearance.
Ability to work onsite up to 5 days a week and be local to the DMV area.
Ability to travel 20%, on average.
2+ years of experience supporting cloud security, cloud engineering, or cloud infrastructure.
Experience implementing or assessing security controls in AWS, GCP, and Azure.
Experience with cloud IAM, network security, encryption, logging, monitoring, and configuration management.
Experience using cloud-native security tools, security posture management tools, or infrastructure as code tools.
Legally authorized to work in the United States without employer sponsorship, now or in the future.

Tools, Frameworks, and Skills

Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure
Python, PowerShell, Bash, Terraform
NIST, CIS, ISO
Kubernetes

Team and Work Context

Deloitte’s Government & Public Services (GPS) practice delivers impact for federal, state, and local government clients and public higher education institutions. The Enterprise Security offering focuses on securing the technical backbone while enabling secure digital transformation, including security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Additional Strengths

Ability to work independently and collaborate as part of a team
Effective written and verbal communication
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Preferred Qualifications

Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs
Experience with security frameworks and benchmarks including NIST, CIS, or ISO
Experience with scripting and automation using Python, PowerShell, Bash, or Terraform
Experience with container security, Kubernetes, or DevSecOps practices
Industry certifications such as AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP

The wage range disclosed for this role estimate has not been adjusted for applicable geographic differential, and a reasonable estimate is USD 107,925 to 188,000. You may also be eligible to participate in a discretionary annual incentive program, subject to program rules and factors including individual and organizational performance.

View full job page →

26d ago

Cloud Security Engineer - Azure Defender/Prisma Cloud/Cortex Cloud

PNC Financial Services Group Birmingham, AL

Birmingham, AL

26d ago

$91k - $186k/yr Full time Cloud Native Application Protection Platform Cloud Platforms Cloud Risk Management

Apply Now

Job Description

Join PNC’s Technology organization as a Cloud Security Engineer supporting cloud security capabilities across Azure and AWS. You will help improve cloud security posture through strong vendor partnerships, CNAPP/control ownership, recurring analysis and attestation, and stakeholder-facing reporting built with Microsoft PowerBI. This role is onsite in Birmingham, AL.

Compensation: $91,000 to $185,900 base salary per year. Salaries may vary by geographic location, market data, and individual skills, experience, and education. This role is incentive eligible, with payment based on company, business, and/or individual performance.

What you will do

Partner with stakeholders who own technical controls related to Cortex Cloud, enabling partners to test and evaluate fit while reducing tool sprawl.
Build and maintain proactive relationships with partners and internal stakeholders.
Enable partners with appropriate access to lower environments for testing and analysis.
Own vendor relationships with Azure, AWS, and Palo Alto, including ensuring response and support to evaluate new capabilities.
Champion issues and challenges with each vendor, holding them accountable for correcting problems and bugs that impact the team’s ability to deliver value.
Engage with Enterprise Architecture (EA) and obtain approvals through PNC processes to enable new capabilities that increase cloud security posture.
Plan and lead Quarterly Business Review (QBR).
Own RCSA Control TEC083 for Cloud Security.
Provide recurring attestation evidence for each Cloud Security Control and review/analyze TEC083 on a recurring basis.
Identify control gaps and determine whether net-new controls are needed.
Determine when existing controls are no longer applicable or should belong in a different RAU.
Collaborate with the Cloud Security team to automate attestation evidence, including evaluating whether manually obtained evidence can be automated.
Develop Cloud Security dashboard UI with Microsoft PowerBI to show Azure and AWS configuration violations for stakeholders, partners, and the business.
Provide dashboard usage statistics and help gather customer requirements to build a backlog for the Cloud Security Roadmap.
Apply security concepts as subject matter expertise to design, build, and maintain technology solutions, supporting deliverables aligned to project timelines.
Work with architecture to translate high-level designs into implementation details, including sizing, integration details, onboarding, and operationalization.
Evaluate patches, updates, and ongoing maintenance, determining impacts when new standards are implemented and using change control and governance processes to align solutions.
Create detailed implementation, configuration, design, and engineering documentation, and build/implement solutions.
Enable operational partners for transition and day-to-day supportability.
Provide engineering support for production environments and coordinate with other groups as needed.
Assess and manage risks associated with business objectives and activities in support of PNC’s Enterprise Risk Management Framework.

Skills and qualifications

5+ years of industry-relevant experience.
Bachelor’s degree; in lieu of a degree, a comparable combination of education, job-specific certifications, and experience (including military service) may be considered.
Ability to work with ambiguity inside of the role.
Strong relationship building and maintenance.
Ability to understand customer needs.
Ability to influence partners to further adopt CNAPP capabilities.
Technical understanding of CNAPP, controls, and dashboard development.
Preferred: working knowledge with at least one CNAPP such as AWS, Azure, or Palo Alto.
Preferred skills: Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies.

Technologies you will work with

Cortex Cloud, Azure, AWS, Palo Alto
CNAPPs, Microsoft PowerBI, Cloud Security dashboard UI
TEC083

Benefits

Medical/prescription drug coverage with an HSA feature
Dental and vision options
Employee and spouse/child life insurance
Short and long-term disability protection
401(k) with PNC match, pension, and stock purchase plans
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select programs fully paid
Robust wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
15 to 25 vacation days each year depending on career level
Comprehensive range of benefits (see pncthrive.com)

Additional details

Location: Birmingham, AL (onsite)
Application window: expected to be posted for two business days from 07/27/2026 (may be longer with business discretion)
Disability accommodations: If you need accommodations for the application process, email AccommodationRequest@pnc.com with subject “accommodation request” and include your name, job ID, and preferred contact method. You may also call 877-968-7762 and say “Workday.”
Work authorization/sponsorship: PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

View full job page →

30d ago

Sr Infrastructure & Security Engineer

VizyPay Waukee, IA

Waukee, IA

30d ago Closed

$80k - $100k/yr Full time Azure DevOps CI/CD Cloud Infrastructure

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Build, secure, and keep connected VizyPay’s cloud infrastructure, enterprise network, security posture, and operational reliability. In this onsite role in Waukee, IA, you will own the infrastructure foundation beneath VEXIS and support the business systems that keep payments operations protected and audit-ready.

Reporting directly to the CIO, this senior, hands-on individual-contributor position unifies cloud and platform engineering, networking, site reliability engineering, security engineering, and end-user support under one mandate. You will be a core contributor to the annual PCI DSS assessment and to the enterprise BCP/DR programs, including resilience planning and disaster-recovery exercises.

Responsibilities

Architect, build, and operate secure, scalable cloud infrastructure across Microsoft Azure, AWS, and DigitalOcean, including compute, virtual networking, storage, and managed data services supporting VEXIS and enterprise systems.
Make infrastructure-as-code (for example Terraform) and GitOps automation the default provisioning path, including policy-as-code and IaC security scanning; build CI/CD pipelines (for example GitHub Actions, Azure DevOps) with automated testing and controlled promotion.
Manage infrastructure cost and capacity through rightsizing, reserved-capacity strategy, usage monitoring, and performance optimization, with spend reported against approved budget and capacity ahead of business growth.
Provide technical leadership across InfraSec and partner with Software Engineering through engineering standards, architecture and design reviews, and mentorship while remaining a hands-on IC.
Administer and support the enterprise network, including firewalls, SD-WAN, switches, wireless access points, and network infrastructure lifecycle management.
Own network segmentation enforcement, TLS 1.2+ everywhere, and secure connectivity (site-to-site and remote-access VPN, DNS, load balancing, and WAF/CDN such as Cloudflare) aligned with least privilege.
Maintain network documentation, configuration baselines, and audit-ready change records; manage network capacity, performance, and availability.
Own and manage security platforms and services including IAM, endpoint security, MDM, password management, security monitoring, and Microsoft 365 security posture with email security controls (anti-phishing, DMARC, DKIM, SPF), including administration, policy integration, and continuous improvement.
Lead security monitoring and detection engineering across SIEM, EDR, and file integrity monitoring (FIM) platforms, including log-source onboarding, detection content, alert tuning, and response runbooks.
Operate vulnerability management (coverage, risk-based prioritization, remediation SLAs), patch management cadence, and asset/configuration inventory; own identity lifecycle management (joiner/mover/leaver), conditional-access administration, and privileged access management (PAM); enforce vault-based secrets management and MFA-inclusive authentication; lead threat modeling and security-by-design with Software Engineering and Product.
Define and operate SLOs, error budgets, and availability/performance monitoring; own the observability stack end to end (metrics, structured logging, distributed tracing, alert design) and drive automation-first operations to reduce toil.
Own incident response across infrastructure and security, including detection, escalation, mitigation, and blameless postmortems with tracked corrective actions; participate in on-call rotation and execute production changes under formal change management.
Serve as Tier 2/3 escalation for end-user support in partnership with the InfraSec Help Desk, covering endpoint engineering and lifecycle management and Microsoft 365 administration and troubleshooting, plus automation of support workflows with measured service quality.
Participate in annual PCI DSS assessment and audit processes, including evidence collection, remediation activities, control validation, coordination of external penetration testing, and year-round audit-ready evidence (standards, access reviews, segmentation validation, monitoring coverage, and recovery-test results).
Design and validate resilience aligned with RTO/RPO, backups, recovery, failover architecture, graceful degradation, and disaster-recovery exercises consistent with enterprise BCP/DR standards.
Contribute to security policy, standards, risk assessments, and employee security-awareness enablement with the CIO, aligning controls with PCI DSS and financial-industry obligations.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent).
7+ years of professional experience across infrastructure, cloud, network, security, or site reliability engineering, including 4+ years operating production infrastructure and security controls at scale with accountability for availability, cost, risk, and outcomes.
Ability to operate with a high degree of autonomy, owning infrastructure and security strategy, priorities, and execution while reporting directly to executive leadership.
Experience in security- or compliance-constrained environments (for example PCI DSS or financial services regulation), including direct participation in compliance assessments and audit evidence collection with delivery under formal SDLC and change management.
Demonstrated incident-response ownership across infrastructure and security, including on-call participation, incident command or mitigation leadership, and postmortem-driven improvement.
Ability to translate infrastructure, security, and reliability tradeoffs into clear recommendations for technical and executive stakeholders.
Production engineering experience on Microsoft Azure, AWS, or DigitalOcean, including compute, virtual networking, IAM, storage, and managed database services.
Infrastructure automation experience with Terraform (or equivalent), GitOps workflows, configuration management, and CI/CD engineering (for example GitHub Actions, Azure DevOps) with security scanning and progressive delivery; operational tooling in Python, PowerShell, and/or Bash with strong Git fluency.
Expertise in containers and orchestration (for example Docker and Kubernetes such as AKS, EKS, or DigitalOcean Kubernetes) or managed container services, plus serverless/edge compute (for example AWS Lambda, Cloudflare Workers).
Understanding of operating systems and directory services: Windows Server, Linux, and Active Directory/Microsoft Entra hybrid identity, plus Microsoft 365 administration.
Skilled in enterprise network infrastructure and troubleshooting (firewalls, SD-WAN, switching, wireless), with routing and switching fundamentals including VLANs, routing protocols, and QoS, plus VPN experience.
Knowledge in network and cloud security including segmentation, firewall policy management, DNS, TLS certificate management, WAF/CDN such as Cloudflare, encryption in transit and at rest, and CSPM.
Experience with security monitoring, detection, and vulnerability management using enterprise SIEM/log analytics, EDR, and FIM, including detection content development, alert tuning, and remediation workflows.
Knowledge of identity, endpoint, and end-user platforms, including least-privilege RBAC, MFA-inclusive authentication, identity lifecycle and PAM, directory and identity platforms (such as Microsoft Entra ID, AWS IAM), endpoint security, MDM, password management, and vault-based secrets management.
Reliability engineering skills including SLO/error-budget practice, observability tooling, database backup and recovery, replication, and point-in-time restore (for example PostgreSQL, SQL Server, MySQL).
Track record of technical leadership through mentoring, architecture or design reviews, or ownership of engineering standards.

Technologies

Microsoft Azure, AWS, DigitalOcean, Terraform, GitOps, policy-as-code, IaC security scanning, GitHub Actions, Azure DevOps, Microsoft 365, IAM, MDM, DMARC, DKIM, SPF, SIEM, EDR, file integrity monitoring (FIM), Prometheus, Grafana, CloudWatch, Azure Monitor, SLOs, PCI DSS, RTO/RPO, TLS 1.2+, SD-WAN, Cloudflare, VPN, DNS, WAF, SIEM/log analytics, privileged access management (PAM), vault-based secrets management, MFA-inclusive authentication, Active Directory, Microsoft Entra, Microsoft Entra ID, AWS IAM, Docker, Kubernetes, AKS, EKS, AWS Lambda, Cloudflare Workers, Windows Server, Linux, VLANs, QoS, CSPM, RBAC, Python, PowerShell, Bash, Git, CI/CD, distributed tracing, structured logging, PostgreSQL, SQL Server, MySQL

Benefits

401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Paid time off
Retirement plan
Vision insurance

Compensation: USD 80,000 - 100,000 per year.

View full job page →

1mo ago

Cybersecurity Engineer II

Atlantic Health System Morristown, NJ

Morristown, NJ

1mo ago Closed

Full time Azure Azure Ad / Entra Id Cloud

This position is no longer accepting applications (closed Sep 13, 2026).

Job Description

Atlantic Health System is hiring a Cybersecurity Engineer II focused on cloud security and identity protection for AWS and enterprise identities.

Responsibilities

Support the design, implementation, and ongoing operation of security controls across cloud environments, with primary emphasis on AWS and coverage for Microsoft Azure and Microsoft 365.
Administer and optimize a cloud-native application protection platform (for example, Wiz) to continuously discover cloud assets, detect misconfigurations, excessive permissions, exposed data, and vulnerable workloads, then route findings for triage.
Conduct risk-based analysis and prioritize cloud security findings using severity, exploitability, data sensitivity, and business context.
Drive remediation to closure in partnership with cloud, infrastructure, application, and vendor teams.
Assess cloud environments against benchmarks and best practices, including CIS Benchmarks and the AWS Well-Architected Framework security pillar, and manage configuration drift and remediation over time.
Support cloud identity and entitlement security, including review and right-sizing of AWS IAM roles, policies, and permission boundaries and reduction of standing and excessive privilege across cloud accounts.
Administer and support Microsoft Entra ID and hybrid Active Directory identity services, including conditional access, multifactor authentication, authentication methods, application registrations, and single sign-on integrations.
Configure and operate Microsoft Entra Privileged Identity Management (PIM), supporting privileged access practices such as just-in-time elevation and periodic access reviews and certifications.
Monitor, triage, and investigate cloud and identity security alerts from sources such as Wiz, AWS GuardDuty, AWS Security Hub, AWS CloudTrail, Microsoft Defender for Cloud, Microsoft Entra ID Protection, and the enterprise SIEM.
Contribute to secure cloud onboarding and architecture reviews for new cloud services, SaaS applications, and third-party integrations, including evaluation of authentication, authorization, logging, encryption, and data handling.
Maintain familiarity with infrastructure-as-code and container technologies (including Terraform or CloudFormation, CI/CD pipelines, and Kubernetes) to review security findings and route them appropriately.
Participate across the broader security program as team priorities require, assisting with vulnerability management, data protection, application security, and endpoint and email security.
Serve on the cybersecurity incident response team, supporting detection, triage, investigation, containment, and remediation for security incidents, including cloud and identity-based attacks.
Develop and maintain cloud and identity security metrics, dashboards, runbooks, and technical documentation for technical teams and leadership.
Collaborate with ISS and partner teams including Privacy and Compliance to support protection of ePHI and alignment with HIPAA and other regulatory requirements.
Contribute to development and implementation of cybersecurity strategies, policies, standards, and procedures, especially those covering cloud and identity.
Participate in a rotating on-call schedule for incident response and time-sensitive security matters outside standard business hours.

Requirements

Bachelor's degree or higher in Cybersecurity, Information Technology, or a related field is preferred; equivalent professional experience may be considered in lieu of a degree.
3+ years of experience in cybersecurity, cloud engineering, identity and access management, or information technology with meaningful security responsibilities in a large organization, preferably healthcare.
Hands-on experience securing AWS environments, including working knowledge of AWS IAM (roles, policies, trust relationships, permission boundaries), organizational structure and guardrails, VPC and network controls, S3 and data storage security, encryption and key management, plus native services such as CloudTrail, GuardDuty, Security Hub, and Config.
Working experience with Microsoft Azure and Microsoft 365 security, including Defender for Cloud, subscription and resource-level controls, and cloud workload protection.
Practical experience with a cloud security posture management or CNAPP platform such as Wiz, Prisma Cloud, Orca, or Microsoft Defender for Cloud, including interpreting findings, tuning policies, and using the platform to drive remediation.
Solid working knowledge of Microsoft Entra ID and hybrid identity, including conditional access, multifactor authentication, Entra Connect and directory synchronization, application registrations and enterprise applications, SSO protocols (SAML, OAuth 2.0, OpenID Connect), and Privileged Identity Management.
Understanding of core identity and access management concepts, including least privilege, RBAC, separation of duties, joiner-mover-leaver processes, access reviews, and privileged access management.
Familiarity with common cloud and identity attack techniques (credential and token theft, consent phishing, privilege escalation via misconfigured roles, and abuse of public or misconfigured resources) and the controls that mitigate them.
Well-rounded knowledge beyond cloud and identity, including vulnerability management, data protection, application security, network security, and endpoint and email security.
Working knowledge of HIPAA requirements for protecting electronic protected health information (ePHI) in a hospital or healthcare environment, or ability to develop that knowledge quickly.
Hands-on experience contributing to incident response: alert triage, investigation, containment, and remediation as part of a team.
Scripting or automation experience with PowerShell, Python, or the AWS CLI, plus comfort working with APIs to extract data and reduce manual effort (plus).
Willingness and availability to participate in the rotating on-call schedule.

Technologies

AWS, Microsoft Azure, Microsoft 365
Wiz, Microsoft Entra ID, Microsoft Entra Privileged Identity Management (PIM)
Hybrid Active Directory, Entra Connect, conditional access, multifactor authentication
AWS IAM, AWS Well-Architected Framework security pillar, CIS Benchmarks
Microsoft Defender for Cloud, Microsoft Entra ID Protection, GuardDuty, Security Hub, CloudTrail
Terraform, CloudFormation, Kubernetes, CI/CD pipelines, Infrastructure-as-code
Prisma Cloud, Orca, enterprise SIEM
S3, VPC, Config
SAML, OAuth 2.0, OpenID Connect
PowerShell, Python, AWS CLI
HIPAA, ePHI, CNAPP

Benefits

Medical, Dental, Vision, Prescription Coverage
Life & AD&D Insurance
Short-Term and Long-Term Disability (with options to supplement)
403(b) Retirement Plan: Employer match and additional non-elective contribution
PTO & Paid Sick Leave
Tuition Assistance, Advancement & Academic Advising
Parental, Adoption, Surrogacy Leave
Backup and On-Site Childcare
Well-Being Rewards
Employee Assistance Program (EAP)
Fertility Benefits, Healthy Pregnancy Program
Flexible Spending & Commuter Accounts
Pet, Home & Auto, Identity Theft and Legal Insurance

Education, Training and Certification

Cloud certifications are highly desirable, including AWS Certified Security – Specialty or AWS Certified Solutions Architect.
Microsoft certifications such as AZ-500 (Azure Security Engineer) or SC-300 (Identity and Access Administrator) are valued.
Broad security certifications such as CompTIA Security+, GIAC GCLD (Cloud Security Essentials) or GCSA, or (ISC)² CCSP are valued.
Progress toward or interest in a senior-level certification such as CISSP is viewed favorably.

About Atlantic Health

Headquarters in Morristown, New Jersey, and a leading non-profit health care system.
Facilities and sites of care include Atlantic Health Morristown Medical Center, Atlantic Health Overlook Medical Center, Atlantic Health Newton Medical Center, Atlantic Health Chilton Medical Center, Atlantic Health Hackettstown Medical Center, Atlantic Health Goryeb Children's Hospital, Atlantic Health CentraState Healthcare System, Atlantic Medical Group, Atlantic Visiting Nurse, Atlantic Mobile Health, and Atlantic Rehabilitation.
More than 900 community-based healthcare providers affiliated through Atlantic Medical Group.

Location: Morristown, NJ (onsite)

Minimum Experience: 3 years

View full job page →

1mo ago

Security Engineer

Flash AI Remote 🇺🇸 Remote

Remote

1mo ago Closed

$120k+/yr Full time Amazon Web Services Application Security Aws Iam

This position is no longer accepting applications (closed Sep 10, 2026).

Job Description

Flash AI is hiring a hands-on Security Engineer to own security and compliance across the organization, with primary accountability for CJIS and SOC 2. This role manages compliance readiness through Vanta, leads audit and evidence workflows, and partners closely with engineering to keep the application and AWS environment secure.

Responsibilities

Own SOC 2 and CJIS compliance end to end, maintaining continuous readiness, running the annual SOC 2 audit cycle, and ensuring alignment with the CJIS Security Policy requirements for handling criminal justice information.
Administer Vanta as the source of truth for the compliance posture by managing automated control tests, resolving failing tests, keeping integrations healthy, and serving as the primary contact for auditors and customer security reviews.
Maintain and keep current the security documentation set, including policies, procedures, a risk register, access reviews, and incident response plans as the platform evolves.
Drive vulnerability and supply-chain management by tracking dependency and container vulnerabilities from scanning tools, prioritizing based on real risk, pushing findings to closure within SLA, and coordinating third-party penetration tests through remediation.
Triage application security findings and work with engineering to implement fixes by routing findings from scanners, pen tests, and external reviews to the appropriate owners and following them to closure.
Over time, take on additional review responsibilities directly.
Partner with engineering to harden the AWS environment by tracking IAM, networking, KMS (encryption), and logging posture, flagging misconfigurations and drift, and helping improve alerting and incident response.

Requirements

3+ years in security, compliance, or IT/cloud engineering with meaningful security responsibility.
Hands-on experience with a compliance framework such as SOC 2, ISO 27001, FedRAMP, HIPAA, or CJIS, including audit preparation and evidence management.
Working knowledge of AWS security fundamentals: IAM, VPC networking, KMS, and CloudTrail.
Ability to read code in Python or TypeScript/JavaScript to understand a security finding and discuss remediation with engineers.
Familiarity with vulnerability management and dependency scanning tooling.
Strong writing and organization skills, with documentation that can withstand audit scrutiny.
Must reside in the United States and be able to pass state and federal fingerprint-based background checks required for CJIS-authorized access to criminal justice information.

Technologies

Vanta, SOC 2, CJIS, ISO 27001, FedRAMP, HIPAA
AWS, IAM, VPC, KMS, CloudTrail
Python, TypeScript, JavaScript

Nice to Have

Direct CJIS Security Policy experience, or experience supporting government and public-sector customers.
Experience administering Vanta, Drata, Secureframe, or a comparable GRC platform.
Experience independently reviewing code or system designs for issues such as broken auth, injection, access control and multi-tenancy boundaries, or secrets handling.
Security certifications including Security+, AWS Security Specialty, CCSP, CISSP, or OSCP.
Experience securing containerized workloads, CI/CD pipelines, and infrastructure as code (Terraform).
Experience securing data pipelines or ML/AI systems that handle sensitive data.