> Markdown version of [/jobs/ext/245471-senior-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/245471-senior-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Security Engineer - **Company:** Guidepoint Global, LLC - **Location:** Morrisville, NC, United States (Remote available) - **Experience:** Expert - **Contract:** Contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Applicant Tracking Systems, Microsoft Azure, Big Data, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Data Centers, Information Leak Prevention, Data Security, Fraud Prevention and Detection, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Machine Learning, OAuth, Open Web Application Security, Cloud Services, Ansible, Security Assertion Markup Language (SAML), Security Information and Event Management, Google Cloud, Istio, Large Language Models, Multi-Cloud, Generative AI, Infrastructure as Code (IaC), Cloudformation, Pandas, Customer Identity Access Management, Containerization, Pyspark, Kubernetes, Information Technology, Drilldown, Purple Team (Cyber Security), Api Design, Terraform, Docker, Databricks - **Published:** May 13, 2026 - **Apply:** https://www.dice.com/job-detail/4fe455a1-835d-4ebc-8a35-c689de717a6e ## About the Role * Cloud Fluency: Expert-level knowledge of security architectures in AWS, Azure, and Google Cloud. * Infrastructure as Code (IaC): Mastery of Terraform, Ansible, or CloudFormation to deploy and manage security configurations at massive scale. * Big Data Analytics for Security: Ability to leverage Databricks to perform deep-dive analysis on billions of logs for threat hunting and efficacy reporting. * Container & Orchestration Security: Experience securing Kubernetes (EKS/AKS/GKE) and Docker environments, focusing on runtime protection and image integrity. * Identity Mastery: Proficiency with OAuth 2.0, SAML, and CIAM solutions for large-scale customer and employee authentication. * Security Data Science: Proficiency in using Python (PySpark/Pandas) within Databricks to build custom anomaly detection models that go beyond standard SIEM correlation rules. * Generative AI Security: Knowledge of the OWASP Top 10 for LLMs and experience implementing AI gateways or "firewalls" to monitor and filter AI-generated traffic. * API-First Automation: Deep expertise in building "glue code" that connects disparate COTS and custom applications via secure, automated APIs to streamline cross-functional business activities. * Algorithmic Literacy: The ability to explain to non-technical stakeholders how AI-driven security decisions (like blocking a suspicious $1M commercial transaction) are made and how to handle "false positives" at scale. * Efficiency Mindset: A relentless focus on identifying repetitive manual tasks (e.g., firewall rule reviews, access audits) and replacing them with self-healing, automated systems., * 8+ years in a technical Cybersecurity Engineering role, with at least 4 years focused on large-scale cloud or hybrid environments, and a portfolio of projects where AI or Machine Learning was directly applied to solve security or operational scaling problems. * B.S. or M.S. in Computer Science, Information Security, or a related technical field required. * Demonstrated experience managing environments with 10,000+ workloads and high-availability requirements for retail/commercial applications. * Experience with CI/CD and GitOps workflows, treating security configurations as code that is automatically tested and deployed. Preferred Certifications * CISSP (Certified Information Systems Security Professional) * CCSP (Certified Cloud Security Professional) * Cloud-specific Professional Security Certifications (e.g., AWS Certified Security - Specialty or Google Professional Cloud Security Engineer). ## Description Senior Cloud Security Engineer (Hybrid/Multi-Cloud) - REMOTE, Work will be remote with candidates located in Morrisville, NC; Falls Church, VA; or Eagan, MN given preference. Non-local support will be considered for highly qualified candidates. As a Senior Cloud Security Engineer, you will directly implement technical strategy for securing a massive hybrid ecosystem comprising 30,000+ physical sites and diverse multi-cloud tenants. You will be responsible for building the automated "guardrails" that protect our assets, data, and identity fabric across private data centers and public cloud environments. Your mission is to ensure a high-quality security posture through continuous efficacy assessments, fraud mitigation, and proactive threat detection. Responsibilities * Security Posture & Compliance Automation: Design and implement automated compliance assessments to enforce hardening standards (CIS, NIST) across cloud accounts and on-premises virtualized environments. * Asset & Data Security: Architect and maintain the security of our sprawling asset inventory. Implement data-at-rest and data-in-transit encryption strategies that span from physical data center servers to cloud-native storage. * Identity & Fraud Mitigation: Develop and secure the "Identity Fabric" linking 600k+ employees and millions of commercial customers. Collaborate with Fraud teams to integrate signals from SIEM and Databricks to detect and block malicious account activity. * Hybrid Engineering: Build and manage secure connectivity (Transit Gateways, Service Mesh) between on-premises hypervisors and multi-cloud environments, ensuring consistent policy enforcement. * Threat Detection & Response: Partner with the SOC to develop high-fidelity detection logic. Build SOAR playbooks that automate the isolation of compromised cloud workloads or on-premises VMs. * Efficacy Assessment: Support ongoing "Purple Team" exercises and control testing to validate that security tools (EDR, WAF, DLP) are performing as intended across all tenants. * AI/ML Security Governance (Adversarial Defense): Establish security guardrails for the enterprise's internal and customer-facing AI models. This includes protecting Databricks training pipelines from data poisoning and implementing mitigations for LLM-specific threats like prompt injection and sensitive data leakage. * Hyper-Automation of Security Operations: Drive the transition from manual "click-to-operate" security to Autonomous Security Operations. This involves building advanced SOAR playbooks that use ML-based triggers to perform auto-remediation across hybrid environments without human intervention. * Business Process Streamlining: Partner with business units to integrate security "invisibly" into their workflows. Use automation to reduce "security friction" in logistics and retail operations, ensuring that compliance checks (like PCI or SOC2) are performed continuously and programmatically. * AI Asset Management: Discover and catalog "Shadow AI" usage across the enterprise, ensuring all third-party AI tools meet the enterprise's privacy and security standards., * Pass a client mandated clearance process to include drug screening, criminal history check and credit check. * Once candidate's resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process. * If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance. * Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.) * All overtime must be pre-approved in writing by the client manager or his/her designated representative. * Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time. * The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women. "Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information." We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)