← 検索結果に戻るCloud Security Engineer
SRM Technologies
リモート勤務
- 勤務地
- Remote (United States)
- 勤務時間
- Full Time
- 掲載日
- 2026年10月9日
応募する前に、企業のウェブサイトで現在も募集中かどうかと詳しい条件を確認してください。
仕事内容
操作画面は日本語です。企業が掲載した求人の職種名や説明文は原文のまま表示され、英語の場合があります。
This is a remote position.
Job Description: Cloud Security Engineer – 5+yrs Role Summary We are looking for an experienced Cloud Security Engineer to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains. Key Responsibilities Security Findings & Remediation Documentation
Analyze and document cloud, email, endpoint, and security monitoring findings.
Produce clear and actionable documentation covering:
o Risk assessment and severity classification o Impact analysis o Recommended remediation actions Maintain findings documentation within ticketing systems, reports, or other designated
platforms. Alert Triage & Investigation
Triage, investigate, and classify security alerts across cloud and security platforms.
Maintain complete and accurate investigation records, including:
o Analysis performed o Containment or mitigation actions (if applicable) o Escalation details o Final alert disposition AI Security in Cloud Environments Secure AI/ML workloads deployed in cloud environments, including training pipelines, data
storage, and inference endpoints. Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or
unauthorized access. Collaborate with engineering teams to ensure secure deployment of AI services following
cloud security best practices. Contribute to governance and policy development for responsible and secure AI usage in
the cloud. Configuration & Security Posture Assessment
Conduct secure configuration reviews across cloud environments.
Perform IAM assessments and analyze CSPM findings.
Document posture assessment results and provide recommendations for security posture
improvements. Support continuous monitoring and tuning of cloud security controls.
Security Automation & Tooling
Design, develop, and maintain security automation scripts and workflow enhancements.
Create automation artifacts using scripting languages such as Python.
Provide sufficient documentation and usage notes to enable ongoing operation and
maintenance by internal teams. Build cloud security infrastructure using infrastructure as code tools such as Terraform
Operational Metrics & Reporting Prepare periodic cloud security operational reports, including:
o Alert volumes and trends o Remediation progress o Posture improvements o Tool tuning and optimization efforts Present concise status updates to stakeholders as requested.
Incident Response Support
Support investigation and response to security incidents impacting cloud environments.
Contribute to incident reports, investigation summaries, timelines, and technical analysis.
Assist with root-cause analysis and corrective action recommendations.
Required Skills & Qualifications
Bachelor’s degree in computer science, Cybersecurity, or related field.
5+ years of experience in Cloud Security / Security Operations.
Hands-on experience with AWS, Azure, GCP, or OCI security services.
Strong knowledge of IAM, network security, and cloud-native security controls.
Experience with CSPM tools and EDR platforms like Crowdstrike
Familiarity with SIEM tools and incident response processes.
Hands-on experience with identity-aware access solutions such as Teleport
(or similar platforms) for secure access to infrastructure and services.
Proficiency in scripting languages like Python.
Foundational understanding of securing AI/ML workloads in cloud
environments (e.g., model access control, API security, data protection). Preferred Qualifications Certifications such as AWS Security Specialty, Azure Security Engineer,
CCSP, or CISSP.
Experience with automation, SOAR platforms, or DevSecOps practices.
Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).
Understanding of email security protocols (SPF, DKIM, DMARC).
Originally posted on Himalayas