Cloud Security Engineer

We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division - a full-spectrum cybersecurity organization covering endpoint protection, event monitoring, threat intelligence, and advanced incident response. This is a hands-on engineering role, not an architecture or design position. You will be in the environment every day, operating and improving the security controls that protect the organization’s cloud and web-based assets while maintaining and hardening the Linux server infrastructure that supports them.

Your work spans two equally important disciplines. On the cloud and web side, you will plan, implement, and monitor security measures across enterprise cloud platforms, analyze cloud services and APIs for risk, and develop the detection and response procedures that keep those environments safe. On the Linux side, you will bring deep system-level expertise to ensure that server infrastructure is securely configured, actively monitored, and thoroughly documented.

This role is a strong fit for someone who is equally at home in a cloud console and a Linux terminal and who brings a security operations mindset to both.

Cloud & Web Security

• Proven experience planning, implementing, and monitoring security measures for enterprise assets hosted on cloud platforms such as AWS, Azure, or Google Cloud Platform
• Ability to analyze cloud services, APIs, and log payloads to ensure they meet industry security standards and organizational requirements
• Experience developing and maintaining standard operating procedures for cloud-based security event handling
• Familiarity with cloud-native security tooling including Cloud Access Security Brokers (CASBs), Cloud Security Posture Management (CSPM), and cloud workload protection platforms
• Experience with cloud architectures including SaaS and PaaS, and common commercial platforms such as Google Workspace, Microsoft 365, and AWS
• Understanding of web application security concepts including OWASP vulnerabilities, API security, and web application firewall (WAF) management
• Experience with cloud IAM frameworks, role-based access control, and Zero Trust Architecture as applied to cloud environments
• Ability to create custom detection mechanisms that correlate log sources across cloud environments to surface potential intrusions

Linux Server

• Strong hands-on experience administering and hardening Linux server environments in an enterprise setting
• Proficiency with Linux security tooling, system logging frameworks, and monitoring utilities
• Experience reviewing system and application logs, identifying anomalies, and taking appropriate corrective action
• Ability to create and maintain thorough documentation for Linux-based systems, including installation, configuration, and troubleshooting procedures
• Experience supporting security continuous monitoring efforts including vulnerability management, system patching, and risk assessments within Linux environments
• Working knowledge of network protocols, firewall management, and secure server configuration in Linux-based infrastructure

Security Operations & Collaboration

• Ability to identify capability gaps and recommend improvements at both the technical and process level
• Experience contributing to the development of detection standards, security procedures, and operational documentation
• Ability to collaborate across teams including cybersecurity, networking, systems administration, and technology support partners
• Comfortable communicating technical findings and risk clearly to both technical peers and senior leadership

A minimum of 5+ years of experience in information technology or cybersecurity is required, with at least 3+ years of direct, hands-on experience implementing or supporting cloud-based security. Candidates with demonstrated experience across both cloud security operations and Linux server administration in an enterprise environment will be strongly preferred.

Desired Skills

• Scripting and automation experience in Python, Bash, Perl, or PowerShell to support cloud security operations and Linux administration
• Experience with SIEM platforms and log aggregation tools such as Microsoft Sentinel, Splunk, or equivalent
• Container security experience with Docker, Kubernetes, or equivalent platforms
• Familiarity with DevSecOps practices and integrating security controls into CI/CD pipelines
• Experience with multi-cloud or hybrid cloud environments
• Infrastructure-as-code (IaC) security experience with tools such as Terraform or CloudFormation
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred
• Relevant certifications such as AWS Certified Security Specialty, Microsoft Azure Security Engineer (AZ-500), Google Professional Cloud Security Engineer, CCSP, or equivalent are strongly preferred

Everforth ECS is seeking a Cloud Security Engineer to work in our Washington, DC office / remote . The role is contingent upon additional funding., Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.