> Markdown version of [/jobs/ext/3363731-cloud-security-sme-vulnerability-management](https://www.wearedevelopers.com/jobs/ext/3363731-cloud-security-sme-vulnerability-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security SME Vulnerability Management

- **Company:** Estuate Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Amazon S3, Microsoft Azure, Cloud Computing Security, Identity and Access Management, Role-Based Access Control, Security Information and Event Management, S3 Bucket, Google Cloud, Amazon Virtual Private Cloud (VPC), Prisma Cloud Platform, Servicenow
- **Published:** September 24, 2026
- **Apply:** https://www.dice.com/job-detail/f2719dfc-ac50-486b-ac3c-2b023d31af5c

## About the Role

* 7+ years in cloud security; 3+ years in an SME or architecture role
 * Hands-on Upwind, Wiz, or Prisma Cloud deployment experience
 * Deep expertise in AWS (IAM, GuardDuty, S3, CloudTrail) and Google Cloud Platform (SCC, VPC Service Controls)
 * Strong CSPM and agentless/eBPF sensor deployment experience
 * Familiarity with NERC CIP, NIST 800-53, or CIS compliance frameworks
 * Experience producing executive-level architecture and governance documentation
__________________________________________________

Preferred

 * Certifications: CCSP, AWS Security Specialty, CISSP
 * Exposure to ServiceNow VRM, AI-assisted security workflows, or lab/POC environment buildouts

## Description

* Design and implement cloud security architecture across AWS, Google Cloud Platform and Azure
 * Deploy and manage CNAPP platforms (Upwind) including sensors, cloud collectors, CSPM policies, and RBAC/SSO configuration
 * Govern S3 bucket security, IAM least-privilege models, and Google Cloud Platform security controls
 * Integrate CNAPP with CrowdStrike, Tenable, and SIEM/SOAR tooling
 * Drive vulnerability prioritization by correlating runtime context with scan findings
 * Define and maintain RBAC frameworks and access governance workflows (e.g., ServiceNow)
 * Mentor and guide VM, App Sec, SOC, and BU security teams