> Markdown version of [/jobs/ext/1188468-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1188468-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** SRM TECHNOLOGIES, INC. - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Identity and Access Management, Python (Programming Language), Network Security, Security Information and Event Management, Scripting, Google Cloud, Data Storage Technologies, Cloud Platform System, Software Security, Multi-Cloud, AI Platforms, Infrastructure Automation Frameworks, Information Technology, Terraform, Oracle Cloud Infrastructure, Devsecops, Security Orchestration, Automation & Response - **Published:** July 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f539e111b1d5d052 ## About the Role * Bachelor's degree in computer science, Cybersecurity, or related field 5+years of experience in Cloud Security / Security Operations. * Hands-on experience with AWS, Azure,GCP, or OCI security services * Strong knowledge of IAM, network security, and cloud-native security controls. * Experience with CSPM tools and EDR platforms like Crowdstrike * Familiarity with SIEM tools and incident response processes. * Hands-on experience with identity-aware access solutions such as Teleport (or similar platforms) for secure access to infrastructure and services. * Proficiency in scripting languages like Python. * Foundational understanding of securing AI/ML workloads in cloud environments (e.g., model access control, API security, data protection). Preferred Qualifications * Certifications such as AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP Experience with automation, SOAR platforms, or DevSecOps practices. * Exposure to compliance frameworks (ISO 27001, SOC 2, etc.). ## Description to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains. Key Responsibilities Security Findings & Remediation Documentation * Analyze and document cloud, email, endpoint, and security monitoring findings. * Produce clear and actionable documentation covering: o Risk assessment and severity classification o Impact analysis o Recommended remediation actions * Maintain findings documentation within ticketing systems, reports, or other designated platforms. Alert Triage & Investigation * Triage, investigate, and classify security alerts across cloud and security platforms. * Maintain complete and accurate investigation records, including: o Analysis performed o Containment or mitigation actions (if applicable) o Escalation details o Final alert disposition AI Security in Cloud Environments * Secure AI/ML workloads deployed in cloud environments, including training pipelines, data storage, and inference endpoints. * Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or unauthorized access. * Collaborate with engineering teams to ensure secure deployment of AI services following cloud security best practices. * Contribute to governance and policy development for responsible and secure AI usage in the cloud Configuration & Security Posture Assessment * Conduct secure configuration reviews across cloud environments. * Perform IAM assessments and analyze CSPM findings. * Document posture assessment results and provide recommendations for security posture improvements. * Support continuous monitoring and tuning of cloud security controls. Security Automation & Tooling * Design, develop, and maintain security automation scripts and workflow enhancements. * Create automation artifacts using scripting languages such as Python. * Provide sufficient documentation and usage notes to enable ongoing operation and maintenance by internal teams. * Build cloud security infrastructure using infrastructure as code tools such as Terraform Operational Metrics & Reporting * Prepare periodic cloud security operational reports, including: o Alert volumes and trends o Remediation progress o Posture improvements o Tool tuning and optimization efforts * Present concise status updates to stakeholders as requested. Incident Response Support * Support investigation and response to security incidents impacting cloud environments. * Contribute to incident reports, investigation summaries, timelines, and technical analysis. * Assist with root-cause analysis and corrective action recommendations. Required ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)