Cloud Security Engineer

Apply now: Cloud Security Engineer , location is Hybrid . The start date is ASAP for this 6-month contract-to-hire position.

Job Title: Cloud Security Engineer
Location-Type: Hybrid (3 Days A Week On-Site - At one of the following locations; Silver Spring, MD 20910 / Sterling, VA 20166 / Atlanta, GA 30318)
Start Date Is: ASAP
Duration: Contract to Hire (6 Months)
Eligible Work Authorization Status: US-Citizen or Green Card

W2 Pay Rate Range: $76/hr – $86/hr

Job Description:
The Cloud Security Engineer is responsible for strengthening cloud security posture through vulnerability management, security tooling, and cross-functional engineering collaboration, with a primary focus on Google Cloud Platform environments.

Day-to-Day Responsibilities:

• Manage and prioritize cloud vulnerabilities across GCP environments using CSPM/CNAPP tools

• Analyze security findings and clearly articulate business risk and remediation priorities

• Partner with engineering and application teams to guide remediation strategies

• Utilize CSPM tools (ex: Wiz, Prisma Cloud, Orca, Lacework, or similar) to identify misconfigurations and risks

• Assist with development of automation scripts (primarily Python) to improve security workflows and reporting

• Support cloud security hardening efforts across IAM, networking, storage, and compute services

• Collaborate with DevOps teams to integrate security into CI/CD pipelines

• Review container and Kubernetes security configurations

• Contribute to documentation, standards, and security best practices

• Support multi-cloud security initiatives where applicable (AWS/Azure)

• Research emerging cloud threats and security trends

• Assist with security reviews of AI/ML platforms and emerging technologies

Requirements:

• Must-Have Skills/Experiences:

  • 7 years of experience in cloud security, cloud engineering, or related field

  • Hands-on experience securing Google Cloud Platform (GCP) environments

  • Strong experience with cloud vulnerability management processes

  • Experience identifying, prioritizing, and coordinating remediation of cloud risks

  • Experience with CSPM/CNAPP platforms (Wiz, Prisma Cloud, Orca, Lacework, or similar)

  • Working knowledge of Python or similar scripting languages for automation (not heavy development)

  • Understanding of cloud IAM and least-privilege access principles

  • Knowledge of cloud networking fundamentals (VPCs, segmentation, routing)

  • Experience with container security and Kubernetes environments

  • Understanding of Infrastructure-as-Code concepts (Terraform preferred)

  • Strong understanding of cloud security architecture and security controls

  • Ability to communicate risk clearly to technical and non-technical stakeholders

  • Strong collaboration skills working with engineering and security teams

  • Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)

• Nice-to-Have Skills/Experiences (NOT required, but a plus!) :

  • Experience with AWS or Azure cloud security

  • Cloud security certifications (GCP, AWS, or Azure)

  • Experience with DevSecOps practices and CI/CD security integration

  • Experience with AI/ML platform security

  • Experience with observability or SIEM tools (ex: Splunk)

  • Experience integrating security tools with Jira or Slack

  • Familiarity with Oracle Cloud Infrastructure (OCI)

  • Experience with Terraform or similar IaC tools