> Markdown version of [/jobs/ext/3572141-cloud-security-engineer-aws-gcp](https://www.wearedevelopers.com/jobs/ext/3572141-cloud-security-engineer-aws-gcp). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer (AWS & GCP - **Company:** Quantum Sky Engineering Llc - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $115,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Systems Engineering, JIRA, Backup Devices, Cloud Computing, Cloud Computing Security, Cloud Storage, Cyber Security, Linux, Data Flow Control, Identity and Access Management, Issue Tracking Systems, Network Architecture, Network Diagrams, Cloud Services, Ansible, Systems Integration, Tripwire, Virtual Machines, Software Vulnerability Management, Google Cloud, Okta, Firewalls (Computer Science), Gitlab, Cloudformation, Kubernetes, Information Technology, Palo Alto Networks, Nessus, Terraform, Splunk, Devsecops, Servicenow, Vulnerability Analysis - **Published:** October 3, 2026 - **Apply:** https://www.builtincolorado.com/job/cloud-security-engineer-aws-gcp/11489315?handler=ApplyRedirect ## About the Role * Six (6) or more years of IT engineering and/or cybersecurity experience, with at least three (3) years working in a dedicated cloud security engineering or similar position. * Hands-on experience with both AWS and Google Cloud Platform (GCP). * Ability to diagnose and resolve issues across Linux and Windows systems, network infrastructure, and cloud services. * General systems administration and vulnerability management experience, including system patching and hardening, identity and access management (IAM), and related tasks. * Experience working in a DevSecOps environment, integrating security practices into cloud and infrastructure workflows. * Familiarity with ITSM ticketing systems such as Gitlab (preferred), Jira, ServiceNow, etc. * Ability to work independently during both business hours and on-call periods. * Strong written and verbal communication skills for customer interaction and incident documentation. * Hands-on experience with one or more of the following tools: + Splunk Enterprise + Tenable Security Center/Nessus + Invicti/Acunetix + Appgate + Okta + GitLab + Palo Alto Networks Firewalls + TrendMicro Deep Security + Trivy + Anchore + Terraform + CloudFormation + Ansible Desired: * Bachelor's Degree in Computer Science or other relevant field. * Experience supporting federal/government-facing customers or consulting engagements, ensuring compliance and operational requirements. * Experience with FedRAMP, FISMA, or NIST 800-53 compliance frameworks. * Prior on-call, SRE, SOC, or incident response experience. * Relevant AWS or Google Cloud Platform certifications. * Security+ or other relevant industry security certification. * Experience with infrastructure-as-code or automation tooling. * Experience with Kubernetes is highly desirable., * Must be a US Citizen with the ability to obtain a security clearance ## Description Be an Early Applicant Remote Hiring Remotely in US 115K-140K Annually Senior level Remote Hiring Remotely in US 115K-140K Annually Senior level Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers. The summary above was generated by AI, Quantum Sky is hiring a Cloud Security Engineer (AWS & GCP) to join our team of cloud, security, and compliance experts. This role is primarily focused on day-to-day security engineering, including system hardening, vulnerability remediation, cloud operations, and security tool management across AWS & GCP environments., * Perform systems administration and maintenance including patching, vulnerability scanning, compliance scanning and remediation, backups, and recovery for cloud workloads. * Support AWS & GCP environments, including Windows and Linux virtual machines, container workloads, and cloud services such as EC2, EBS, S3, RDS, WorkSpaces (AWS), Compute Engine, Cloud Storage, Cloud SQL (GCP), and Active Directory or equivalent identity services. * Configure, update, and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring. * Troubleshoot issues across network, compute, application, and identity layers by reviewing logs, collecting data, and analyzing system behavior. * Implement hardening and compliance controls using CIS Benchmarks, DISA STIGs, and FedRAMP requirements. * Remediate vulnerabilities identified by tools such as Tenable, Trivy, OpenSCAP, Anchore, Twistlock, and others. * Provide quality assurance feedback during system deployments to ensure architecture meets compliance and operational requirements. * Collaborate with Security Analysts to ensure uninterrupted delivery of security services to customers. * Create and maintain documentation including network diagrams, dataflow diagrams, SOPs, and security tool configuration guides. * Support client communications, deliverables, and issue resolution with strong verbal and written communication skills. * Support and mentor junior engineers as and when required. * After-Hours 24×7 On-Call Rotation: + Serve as primary or backup on-call engineer during assigned rotation. + Respond to after-hours security alerts, infrastructure incidents, outages, and ConMon events. + Perform initial triage, containment, and stabilization using established runbooks. + Investigate and respond to alerts generated. + Escalate complex issues to senior engineers, architects, or compliance teams. + Document incidents, actions taken, and recommended improvements. + Contribute to automation improvements and runbook enhancements. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [GitOps for the people](https://www.wearedevelopers.com/videos/461-gitops-for-the-people) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)