> Markdown version of [/jobs/ext/3057148-cloud-security-specialist](https://www.wearedevelopers.com/jobs/ext/3057148-cloud-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Specialist - **Company:** Dine Development Corporation - **Location:** Eagleswood, NJ, United States (Remote available) - **Experience:** Expert - **Salary:** $148,000.0 - $164,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Databases, Continuous Integration, Data Security, Linux, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Network Security, Network Segmentation, OAuth, OpenID, PCI Data Security Standards, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Azure DevOps Pipelines, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Software Vulnerability Management, Policy as Code, Data Logging, Scripting, Load Balancing, Data Classification, Delivery Pipeline, Software Security, Git, Cloudformation, Microsoft Fabric, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Bicep, Opsworks, CIS Benchmarks, Api Gateway, Terraform, Devsecops, Access Keys, Docker, Vulnerability Analysis - **Published:** September 24, 2026 - **Apply:** https://www.builtincolorado.com/job/cloud-security-specialist/11344914?handler=ApplyRedirect ## About the Role * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field. Equivalent work experience in lieu of degree is considered. * Two or more years of experience in cybersecurity, network security, DevSecOps, or related work. * Three to five years of hands-on experience administering Microsoft Azure and/or Amazon Web Services. MINIMUM SKILL QUALIFICATIONS * Working knowledge of cloud security, identity and access management, RBAC, cloud networking, encryption, logging, and secure configuration. * Experience reviewing infrastructure as code, deployment pipelines, containers, or cloud-hosted applications. * Strong analytical, troubleshooting, documentation, communication, and teamwork skills. PREFERRED QUALIFICATIONS * Experience with Microsoft Entra ID, Microsoft Defender for Cloud, AWS Security Hub, AWS GuardDuty, SIEM, or comparable cloud security tools. * Experience with Azure DevOps pipelines, Git, and policy as code (Azure Policy, AWS SCPs, AWS Config). * Experience with landing zones, hub-and-spoke design, cloud WAF, CASB, API security, and Azure CAF or AWS Well-Architected Framework. * Experience with Microsoft Purview, Fabric, and Copilot governance; identity protocols (OAuth 2.0, OIDC, SAML, PKI). * Container security (Docker, Kubernetes) and scripting in Python or PowerShell. * Security+, Microsoft Azure Security Engineer Associate (AZ-500), AWS Certified Security - Specialty, or equivalent certification. * Familiarity with NIST CSF, CIS Controls, ISO 27001/2, PCI-DSS, SOX, HIPAA, GDPR, GLBA, CNAPP/CWPP concepts, EDR/MDR, and Linux and Windows administration. ## Description The Cloud Security Specialist supports day-to-day execution of the organization's cloud security program across Microsoft Azure and Amazon Web Services. The role monitors cloud security controls, secures identity and access, reviews cloud and network architecture, integrates security into deployment pipelines, protects cloud-hosted data, and coordinates remediation with Information Security, Infrastructure, and Application Development. This is a growth-oriented role for a candidate with foundational to intermediate cybersecurity, cloud, or DevOps experience. PRIMARY DUTIES Cloud Security Operations and Posture Management * Monitor Azure and AWS environments for misconfigurations, vulnerabilities, policy violations, suspicious activity, and drift from CIS Benchmarks and approved baselines. * Administer and tune cloud security posture management and cloud-native security services, including Microsoft Defender for Cloud, AWS Security Hub, and AWS GuardDuty. * Investigate cloud security alerts, document findings, coordinate remediation with system and application owners, and escalate high-risk findings to senior staff. * Maintain cloud security dashboards, asset inventories, and landing zone usage and reporting. Identity and Access Management * Support Azure and AWS identity controls, including Microsoft Entra ID, AWS IAM, role-based access control (RBAC), least privilege, multifactor authentication, conditional access, and privileged access management. * Review roles, service principals, managed identities, access keys, and excessive or inactive access; support identity federation and SSO using OAuth 2.0, OpenID Connect, and SAML. Cloud Architecture and Network Security * Support secure landing zone design, hub-and-spoke topology, environment separation, and network zoning using NSGs, AWS security groups, network ACLs, and private endpoints. * Support secure configuration of load balancers and gateways (Azure Application Gateway, Azure Load Balancer, AWS ALB/NLB, API gateways), cloud WAF, CASB, and API security controls. * Review proposed cloud architectures for sound security design and escalate design concerns to senior staff. Secure Cloud Engineering and DevSecOps * Integrate security requirements into deployments; review infrastructure-as-code (Bicep, ARM, Terraform, CloudFormation) and configurations for security risks. * Support security scanning, secrets detection, and policy checks in Azure DevOps (ADO) pipelines. * Implement and maintain security policy as code using Azure Policy, AWS Service Control Policies, and AWS Config rules. Data Security in the Cloud * Support secure configuration of storage, databases, encryption, secrets, and key management (Azure Key Vault, AWS KMS). * Support data classification, labeling, and DLP with Microsoft Purview, and governance controls for Microsoft Fabric and Copilot, including oversharing risk. Monitoring and Incident Response * Ensure cloud audit, security, and data access logs reach security monitoring platforms; support investigations, triage, and documentation for cloud-related incidents. Cloud Risk, Compliance, and Reporting * Support risk assessments, audit evidence collection, and assessment of cloud controls against NIST, CIS Benchmarks, NYDFS, Virginia BOI, PCI-DSS, and other requirements. * Prepare cloud security metrics and reports for leadership; document standards, procedures, diagrams, and exceptions. ADDITIONAL DUTIES * Participate in security awareness, tabletop exercises, and training; perform other duties as assigned., Drive cloud security sales by partnering with regional sellers, positioning products for security and cloud personas, engaging customers during evaluations and post-sales, developing pipeline, supporting major deals, training internal teams, and providing product feedback. The role requires advising senior technical and executive audiences, managing cloud sales processes, presenting to large groups, maintaining cloud certifications, and traveling up to 50%., Designs and delivers Qualys-based security and compliance solutions for enterprise customers across cloud and on-premises environments. Supports technical sales engagements, proofs of concept, architecture workshops, proposals, deployment health checks, and customer advisory activities. The role addresses asset and vulnerability management, patching, compliance, threat detection, application security, and remediation. It also contributes to product roadmap feedback, sales enablement, technical content, field training, and industry events, with at least 30% customer travel. ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)