Cloud Security Engineer

We’re looking for a security engineer who understands vulnerability management as an end-to-end discipline. Not just scanning, but contextualizing findings, eliminating false positives, and driving remediation outcomes across engineering, development and platform teams. You have hands-on experience operating security tooling across AWS and Azure, you can perform architecture reviews and deliver actionable guidance, and you’re comfortable supporting ATO processes and continuous monitoring under RMF. You work well without heavy direction, you know how to prioritize risk in complex environments, and you can translate technical findings into clear reporting for both technical and executive audiences. You are comfortable giving technical presentations to leadership, that results in understanding and acceptance. You are familiar with Artificial Intelligence GPT prompting.

What You’ll Do

• Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments

• Conduct authenticated and unauthenticated scans of web applications, APIs, servers, databases, and network devices

• Perform risk-based analysis of findings including false positive validation, asset context evaluation, and remediation verification

• Partner with platform, cloud, and application teams to drive sustainable remediation outcomes

• Implement, operate , and tune CSPM tools, vulnerability scanners, and application security tooling across AWS, Azure, and Google Cloud Platform

• Perform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controls

• Support static, dynamic, container, and dependency scanning and help dev teams understand and fix what’s found

• Perform secure configuration reviews against DISA STIGs and other security baselines

• Automate vulnerability validation, remediation tracking, and control validation using Python, Bash, PowerShell, and Terraform

• Manage certificate lifecycle including inventory, renewal tracking, and deployment coordination

• Support ATO activities, POA&M management, and RMF Step 6 continuous monitoring

• Build and maintain runbooks, technical reports, executive dashboards, and risk summaries

• Assist during security audits and incident response investigations involving vulnerable systems

• Pro ty pe and pro vide traini ng on new to ols and solutions .

• Must have ship.
• Ability to pass a Public Trust investigation.
• Bachelor’s degree in a related field.
• 7 years of overall IT experience, with at least 3 years focused specifically on cloud security or vulnerability management
• CISSP, CISA, CISM, or relevant cloud provider certifications required
• Hands-on scripting experience in Python, Bash, or PowerShell
• Familiarity with compliance frameworks including SOC 2, CIS, NIST, or ISO 27001
• Understanding of CVEs, CWEs, CVSS scoring, and how to apply them in practice
• E xperie nce gen erating AI GPT pro mpts the pro duc e the e xpecte d outp ut

Desired Skills

• Active security clearance

Salary: $140,000 - $170,000

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.