Senior Cloud Security Engineer

Requirements:

• 8+ years of enterprise cloud experience, including at least 5 years focused on enterprise cloud security.
• Strong hands-on cloud infrastructure and engineering expertise, with deep knowledge of cybersecurity, networking, identity, and security operations.
• Ability to move between strategic architecture and hands-on engineering, identify security risks, design practical solutions, implement controls, and collaborate with infrastructure and application teams.
• Experience configuring Azure Network Security Groups, Resource Manager, management groups, monitors, Log Analytics, Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks, and network segmentation.
• Experience with incident response, security investigations, log analysis, threat intelligence, security monitoring, IOC analysis, cyber incident coordination, and threat hunting.
• Experience managing vulnerabilities, tracking remediation, assessing and prioritizing risk, and using scanning tools such as Nessus, Tenable, and Defender.
• Experience securing enterprise cloud environments and implementing production security controls.
• Experience with SIEM products, Microsoft Sentinel, CNAPP, log management, security analytics, SOC integration, and threat detection.
• Hands-on experience validating indexer parsers and using Client Query Language for monitoring and data analysis.
• Experience working with security governance teams and application leads to implement enterprise log management standards.
• Familiarity with SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, and Zero Trust principles.
• Experience with cloud risk assessment, attack surface management, CSPM, CWPP, and CNAPP.
• Experience developing Azure Policy and Azure Automation runbooks.
• Experience with IAM, RBAC, PAM, least-privilege access, and multi-factor authentication.
• Experience in highly regulated environments, such as large government agencies or similar organizations.
• Ability to communicate technical issues to technical, non-technical, and executive audiences, and to mentor junior engineers.
• Required certification: Azure Security Engineer Associate, Security+, or CCSP.
• Preferred certification: CCSP or Designing Microsoft Azure Infrastructure (AZ-305).

Responsibilities:

• Identify cloud security vulnerabilities, assess business impact, prioritize remediation, track progress, and validate corrective actions.
• Lead complex cloud security initiatives, provide technical direction to engineers, and help design secure architecture for enterprise environments.
• Guide architecture and security decisions, prevent insecure configurations from reaching production, and establish security gates in deployment pipelines.
• Communicate complex security risks to non-technical stakeholders.
• Assess cloud security risks and gaps, recommend remediation, maintain security documentation and evidence, and support audits and assessments.
• Review proposed cloud solutions, evaluate security risks, and define suitable security and compensating controls.
• Develop Azure policies to promote standardization and compliance, and create Azure Automation runbooks for incident response workflows.
• Monitor security events through SIEM technologies and coordinate incident response with the security operations center.
• Diagnose system problems and threats using logs, line monitors, SIEM, diagnostic software, and test equipment.
• Lead investigations and containment of cloud security incidents.
• Review firewall and Network Security Group rule requests for compliance with security standards.
• Prepare documentation, architecture topology diagrams, IP schemes, and access controls as needed.
• Independently deliver assigned projects.

Technologies:

• Azure
• Cloud
• Firewall
• IAM
• Support
• Network
• RBAC
• Security
• WAF

More

We are hiring a Senior Cloud Security Engineer to serve as a subject matter expert supporting our enterprise Azure migration. The role provides senior technical leadership across cloud security architecture, identity and access management, network security, monitoring, vulnerability management, incident response, and governance, in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks. You will work closely with cross-functional engineering, infrastructure, and IT leadership teams. The pay range is $90–$95 per hour. We offer medical, dental, and vision insurance; a 401(k), HSA, disability and life insurance; paid sick leave where required by law; supplemental insurance options, identity theft protection, pet insurance, wellness programs, an employee assistance program, and professional development opportunities. Benefit eligibility and terms may vary by employment status, tenure, location, and applicable law. Cynet Systems Inc. was founded in 2010 and is headquartered in the Washington, DC metro area. We provide technology staffing and workforce solutions to Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada, with services spanning IT, engineering, life sciences, clinical, and professional staffing. We are a certified Minority Business Enterprise and hold ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II certifications.

last updated 43 week of 2026