Job Description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security Engineer (Cloud Security) based in the United States. As a Cyber Security Engineer specializing in Cloud Security, you will play a critical role in protecting cloud infrastructure, containerized workloads, and infrastructure-as-code environments within a healthcare technology setting. You will lead initiatives to strengthen cloud security posture, implement Zero Trust access strategies, and safeguard sensitive data across complex environments. Working primarily with Microsoft Azure, Kubernetes, and modern security platforms, you will identify vulnerabilities, mitigate risks, and continuously improve security controls. You will also contribute to incident response, identity and access management, and broader enterprise security operations. Collaborating closely with IT, SRE, and development teams, you will embed security practices throughout infrastructure and software delivery processes. This remote opportunity is ideal for a hands-on security professional who enjoys taking ownership, solving complex challenges, and working in a collaborative, regulated environment. Accountabilities In this role, you will strengthen cloud security operations, protect critical infrastructure, and ensure compliance with relevant security and regulatory standards. Your main responsibilities will include: - Manage and secure cloud infrastructure and cloud-based applications, primarily within Microsoft Azure environments. - Protect containerized workloads and Kubernetes environments, including Azure Kubernetes Service (AKS), through network policies, workload identity controls, runtime protection, and container image scanning. - Own and continuously improve Cloud Security Posture Management (CSPM), identifying and remediating configuration weaknesses across cloud environments. - Secure infrastructure-as-code orchestration platforms, including Terraform and OpenTofu, by implementing access controls, secrets management, and deployment approval workflows.

- Manage identity and access security through Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models. - Review network architectures and proposed connectivity changes, providing security recommendations on network segmentation, sensitive data flows, and firewall controls. - Collaborate with IT and Site Reliability Engineering (SRE) teams to investigate and resolve network security concerns. - Administer Zero Trust network access and edge security solutions to protect access to corporate and cloud resources. - Manage broader enterprise security solutions, including SIEM, Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), and vulnerability management tools. - Monitor security alerts, investigate potential threats, respond to incidents, and participate in the security incident response on-call rotation. - Conduct threat analyses, vulnerability assessments, and risk evaluations, documenting findings, coordinating remediation efforts, and reporting progress to leadership. - Develop queries, scripts, integrations, and automated workflows to improve cloud security operations and operational efficiency. - Partner with development teams to integrate security practices into the Software Development Lifecycle (SDLC) and CI/CD pipelines. - Perform regular cloud configuration and access reviews to maintain compliance with established security standards. - Participate in security audits and assessments, supporting governance, risk management, and compliance (GRC) initiatives. Requirements The ideal candidate is a hands-on cloud security professional with extensive experience protecting modern cloud environments, containerized applications, and enterprise infrastructure.

Job Tags

Similar Jobs