Cloud Security Engineer

Workplace
Remote ok

About this role

This is a remote position.

Job Description: Cloud Security Engineer โ€“ 5+yrs


Summary

We are looking for an experienced
Cloud Security Engineer
to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains.

Key Responsibilities

Security Findings & Remediation Documentation
โ— Analyze and document cloud, email, endpoint, and security monitoring findings.
โ— Produce clear and actionable documentation covering: 
o Risk assessment and severity classification
o Impact analysis
o Recommended remediation actions
โ— Maintain findings documentation within ticketing systems, reports, or other designated
platforms.
Alert Triage & Investigation
โ— Triage, investigate, and classify security alerts across cloud and security platforms.
โ— Maintain complete and accurate investigation records, including: 
o Analysis performed
o Containment or mitigation actions (if applicable)
o Escalation details
o Final alert disposition
AI Security in Cloud Environments
โ— Secure AI/ML workloads deployed in cloud environments, including training pipelines, data
storage, and inference endpoints.
โ— Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or
unauthorized access.
โ— Collaborate with engineering teams to ensure secure deployment of AI services following
cloud security best practices.
โ— Contribute to governance and policy development for responsible and secure AI usage in the cloud Configuration & Security Posture Assessment
โ— Conduct secure configuration reviews across cloud environments.
โ— Perform IAM assessments and analyze CSPM findings.
โ— Document posture assessment results and provide recommendations for security posture
improvements.
โ— Support continuous monitoring and tuning of cloud security controls.
Security Automation & Tooling
โ— Design, develop, and maintain security automation scripts and workflow enhancements.
โ— Create automation artifacts using scripting languages such as Python.
โ— Provide sufficient documentation and usage notes to enable ongoing operation and
maintenance by internal teams.
โ— Build cloud security infrastructure using infrastructure as code tools such as Terraform
Operational Metrics & Reporting
โ— Prepare periodic cloud security operational reports, including: 
o Alert volumes and trends
o Remediation progress
o Posture improvements
o Tool tuning and optimization efforts
โ— Present concise status updates to stakeholders as requested.
Incident Response Support
โ— Support investigation and response to security incidents impacting cloud environments.
โ— Contribute to incident reports, investigation summaries, timelines, and technical analysis.
โ— Assist with root-cause analysis and corrective action recommendations.
Required

Skills & Qualifications

โ— Bachelorโ€™s degree in computer science, Cybersecurity, or related field 5+years of experience in Cloud Security / Security Operations.
โ— Hands-on experience with AWS, Azure,GCP, or OCI security services
โ— Strong knowledge of IAM, network security, and cloud-native security controls.
โ— Experience with CSPM tools and EDR platforms like Crowdstrike 
โ— Familiarity with SIEM tools and incident response processes.
โ— Hands-on experience with identity-aware access solutions such as Teleport
(or similar platforms) for secure access to infrastructure and services.
โ— Proficiency in scripting languages like Python.
โ— Foundational understanding of securing AI/ML workloads in cloud environments (e.g., model access control, API security, data protection).
Preferred

Qualifications

โ— Certifications such as AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP
   Experience with automation, SOAR platforms, or DevSecOps practices.
โ— Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).
โ— Understanding of email security protocols (SPF, DKIM, DMARC).

Tired of cold applications?

Sign up with Clera and we'll reach out the moment a role actually fits you โ€” no more spraying applications into the void.

Know someone who'd be great for this?