Cloud Security Engineer

Join Lumen Security Advisory Services and help customers reduce security risk across cloud and on-premises environments. This onsite role in Oregon focuses on cloud security posture assessments, vulnerability scanning, remediation planning, and customer-facing technical discussions, giving you a direct path to impact customers’ security outcomes.

Compensation: USD 80,510 - 124,280 per year. Starting salary varies by primary work location, experience, education, skills, certifications, and other business needs.

What you’ll do

• Support cloud security posture assessments across AWS, Azure, and Microsoft 365 environments.
• Identify cloud misconfigurations, security gaps, exposed resources, and vulnerabilities using cloud-native and custom assessment tools.
• Assess environments against CIS Benchmarks, cloud security best practices, and applicable customer requirements.
• Deploy, configure, and tune vulnerability scanning platforms within customer environments.
• Analyze scan findings by severity, exposure, and business impact to help prioritize remediation.
• Help customers create practical remediation and patching strategies based on identified risks.
• Participate in customer technical discussions, assessment reporting, working sessions, and findings presentations.

What we’re looking for

• Typically 2+ years of experience in cloud security, vulnerability management, cybersecurity, cloud engineering, or a related technical role.
• Typically 6+ years experience with a Bachelor’s Degree, or 4+ years with a Master’s Degree.
• Hands-on experience with at least one major cloud platform, preferably AWS, Azure, or Microsoft 365.
• Foundational understanding of cloud security concepts including identity and access, configuration security, resource exposure, logging, and security posture management.
• Exposure to standards such as CIS Benchmarks, NIST, SOC 2, or PCI DSS.
• Ability to investigate technical security findings and communicate the issue, potential risk, and recommended remediation.
• Interest in learning new cloud platforms, security tools, and automation technologies through hands-on work.

Tools and technologies

AWS, Azure, Microsoft 365, CIS Benchmarks, NIST, SOC 2, PCI DSS, Qualys, Tenable, Entra ID, Defender, Exchange, Teams, SharePoint, Intune, GitHub Copilot, Microsoft Copilot Studio, Power Automate, Claude.

Preferred experience

• Experience with cloud-native security services or cloud security posture management tools.
• Experience with vulnerability scanning platforms, particularly Qualys or Tenable.
• Microsoft 365 security exposure, including Entra ID, Defender, Exchange, Teams, SharePoint, or Intune.
• Experience supporting cloud security assessments, vulnerability scans, remediation efforts, or patching programs.
• Familiarity with AI-assisted development and automation tools such as GitHub Copilot, Microsoft Copilot Studio, Power Automate, or Claude.
• AWS, Azure, or other relevant cloud or cybersecurity certification.

Background screening

If selected, the process may include background checks such as criminal records and/or motor vehicle reports and/or drug screening, depending on position requirements. Job-related concerns identified through screening may disqualify you. Results are evaluated case-by-case. Pursuant to the San Francisco Fair Chance Ordinance, qualified applicants with arrest and conviction records will be considered.