Security Engineer Required - AZ-500 , CompTIA Security+ AND CCSP Job at Cyber Resource, Mechanicsville, VA

  • Cyber Resource
  • Mechanicsville, VA

Job Description

Role: VDOT Senior Cloud Security Engineer (813222)

Job Id : 813222

Positions: 01

Location: 9120 Lockwood Boulevard Mechanicsville, VA 23116

Work Mode: Hybrid

Interview: Either Phone or In Person

Client: VDOT

DUE : 10/23

Experience : 10+

Client State: Virginia

VDOT is seeking an experienced Senior Cloud Security Engineer (Sr CSE) to implement and support the agency’s cloud and computing infrastructure. The Senior Cloud Security Engineer will serve as a subject matter expert supporting VDOT’s enterprise Azure migration, responsible for architecting, implementing, and securing cloud environments in alignment with SEC530 principles, Zero Trust, and enterprise compliance frameworks.

The Senior Cloud Security Engineer will be responsible for assisting in the design, implementation, securing, monitoring, and the continuous improvement of VDOT’s cloud infrastructure and services across the enterprise. The position provides senior-level technical leadership for cloud security architecture, identity and access management, network security, security monitoring, vulnerability management, incident response, and cloud governance.

The Senior Cloud Security Engineer works closely with Cloud Engineering, Network Engineering, Security Operations, Enterprise Architecture, Infrastructure, Application Development, DevOps, Risk Management, and IT leadership to ensure cloud environments are secure, resilient, compliant, and aligned with enterprise security standards.

Key Responsibilities:

  • Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
  • Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments 
  • Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
  • Explain complex security risks to non-technical stakeholders
  • Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
  • Review proposed cloud solutions for security risk and define appropriate security and compensation controls. 
  • Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
  • Monitor security events using SIEM technologies and work with VDOT’s SOC team to coordinate incident response activities.
  • Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment. 
  • Lead investigation and containment of cloud security incidents.
  • Review firewall and NSG rule requests and ensure compliance with security standards.
  • Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required. 
  • Must have the ability to work independently on assigned projects.

Skill

Required / Desired

Amount

of Experience

Enterprise Cloud Experience

Required

8

Years

Enterprise Cloud Security Experience

Required

5

Years

Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering

Required

Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency

Required

Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks

Required

Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams

Required

Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture

Required

Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics,

Required

Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation.

Required

Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis

Required

Candidate must have experiences coordinating during cyber incidents

Required

Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender)

Required

Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments

Required

Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP),

Required

Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting

Required

Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis.

Required

Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards.

Required

Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles

Required

Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization

Required

Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM)

Required

Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP)

Required

Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements

Required

Candidate must have experience creating Azure Automation runbooks to support incident response workflows.

Required

Candidate must have experience with Identity and access management (IAM), Role-based Access control (RBAC), and Privileged Access Management (PAM)

Required

Candidate must have experience with Least-privilege access and multi-factor authentication

Required

Candidate must have experience working in highly regulated environments with large government agencies or similar regulatory environments.

Required

Candidate must have ability to communicate technical issues to technical, non-techical, and executive audiences.

Required

Candidate must have ability mentor junior engineers.

Required

Required: Azure Security Engineer Associate, Security+, Certified Cloud Security Professional certifications

Required

Preferred: CCSP, Designing Microsoft Azure Infrastructure (AZ-305)

Desired

 

Job Tags

Similar Jobs

Hudson Valley Lighting Group

Buyer/Merchandiser Job at Hudson Valley Lighting Group

Merchandiser, Schoolhouse Brand, Textiles & Hardgoods Job Purpose As the Merchandiser, you will own the growth and success of our product lines. This role is responsible for product selection, vendor partnerships, pricing strategy, and inventory performance, ensuring...

Adecco

Crate & Pallet Builder - $18-$21/hr, Peachtree Corners (02355) Job at Adecco

Adecco is hiring for Assemblers in Plymouth, MA. These are temp to perm opportunities. 1st shift: Monday-Friday 7am-330pm 2nd shift: Monday-Friday 330pm-12am 3rd shift Monday-Friday 11pm-730am Pay rate: $17-20 per hour depending on shift/experience. Key...

SeaCast, Inc.

Coordinate Measuring Machine Programmer Job at SeaCast, Inc.

 ...CMM Programmer to join our growing aerospace manufacturing team. In this role, you will be responsible for operating Coordinate Measuring Machines (CMM), performing dimensional inspections, developing and editing inspection programs, and ensuring products meet stringent... 

Staffmark

Pallet Builder Job at Staffmark

 ...Now hiring for a Pallet Builder Location: Tipp City, OH Pay Rate: $18.00 per hour Schedule: 1st Shift - 7am-3:30pm Gear Up. Clock In. Own It. Looking for Pallet Builder jobs in Tipp City where teamwork and steady production make... 

Ultipro

Horticultural Assistant Job at Ultipro

 ...DescriptionRaintree Country Club , located in Charlotte, NC, is pleased to announce an excellent career opportunity for a Full-Time Horticultural Assistant! We are seeking a driven individual who is eager to learn, contribute, and grow within a fast-paced hospitality-...