> Markdown version of [/jobs/ext/4565569-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/4565569-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** Peraton Inc
- **Location:** Colorado Springs, CO, United States (Remote available)
- **Experience:** Expert
- **Salary:** $135,000.0 - $216,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Application Firewall, Audit Trail, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Database Queries, Linux, Identity and Access Management, Python (Programming Language), Network Security, Microsoft Software, Network Segmentation, Windows PowerShell, Ansible, Security Information and Event Management, Software Vulnerability Management, Data Logging, Scripting, Google Cloud, Mitre Att&ck, HybridCloud, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Nessus, Microsoft Sentinel, CIS Benchmarks, Terraform, Oracle Cloud Infrastructure, Splunk, Serverless Computing, Qualys, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** November 4, 2026
- **Apply:** https://www.builtincolorado.com/job/senior-cloud-security-engineer/12055025?handler=ApplyRedirect

## About the Role

Peraton is looking for a Senior Cloud Security Engineer to lead proactive threat hunting, vulnerability analysis, and remediation in support of a multi-cloud environment with 70+ customer tenants and growing. Aside from technical qualifications, the applicant should have effective communication skills, both written and verbal.

The applicant must have hands-on security experience across multiple cloud platforms (AWS, Azure, GCP, OCI) and expertise with Qualys and Tenable for vulnerability management. This role goes beyond scanning: the engineer will form and test threat hypotheses, correlate vulnerability, configuration, and log data to find active or likely compromise, and drive findings through to verified remediation. An investigative mindset, strong analytical skills, and attention to detail are prerequisites for this position., * Bachelors degree and 12 years of experience or a Masters degree and 10 years of experience or an Associates degree and 14 years of experience or a High School diploma/eqivalent and 16 years of experience.

 * Must be a U.S. Citizen with the ability to obtain/maintain a DHS Public Trust.
 * 8+ years of experience in information security, including 5+ years in cloud security engineering
 * Hands-on security experience in at least three of the following cloud platforms: AWS, Azure, GCP, and OCI
 * Expertise with Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus) for vulnerability scanning, analysis, and reporting
 * Demonstrated experience conducting threat hunts and investigations using the MITRE ATT&CK framework
 * Proficiency writing queries and analyzing logs in a SIEM or log platform (Splunk, Microsoft Sentinel, Elastic, or equivalent)
 * Experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services
 * In-depth understanding of cloud identity and access management, network security, encryption, and logging architecture
 * Scripting or automation experience in Python, PowerShell, or Bash, and familiarity with infrastructure-as-code (Terraform, Ansible)
 * Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls, * One or more relevant certifications such as CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer

## Description

The Senior Security Engineer will collaborate closely with our customers, internal engineering and patching teams, and ISSOs/ISSMs to ensure threats are identified early, risk is prioritized accurately, and remediation is completed and documented., * Plan and conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI environments, using threat intelligence and the MITRE ATT&CK framework to identify adversary activity that automated tools have not detected

 * Analyze cloud-native telemetry (AWS CloudTrail and GuardDuty, Microsoft Defender for Cloud and Azure Monitor, Google Security Command Center, OCI Cloud Guard and Audit logs) alongside SIEM data to investigate suspicious activity
 * Administer and optimize Qualys and Tenable (Tenable.io/Tenable.sc/Nessus) scanning across all cloud tenants, including scan policies, agent and connector deployment, asset coverage, and credentialed scanning
 * Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation by exploitability, asset criticality, and exposure, including CISA Known Exploited Vulnerabilities (KEV)
 * Lead remediation of identified threats and vulnerabilities, working with engineering and patching teams to patch, harden, or apply compensating controls, and verify closure through rescanning
 * Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations
 * Develop and tune detection rules, queries, and automated hunt playbooks so successful hunts become repeatable detections
 * Support incident response as a senior technical resource, including scoping, containment recommendations, and root cause analysis
 * Produce hunt reports, remediation tracking, and POA&M inputs, and brief findings and risk to customers, ISSOs/ISSMs, and leadership
 * Mentor junior security engineers in threat hunting techniques, vulnerability analysis, and tool usage, The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance., Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.
Top Skills: Amazon GuarddutyAmazon VpcAmazon Web Services (Aws)AnsibleAPIsAws CloudtrailAws ConfigAws Iam Identity CenterAws Key Management Service (Kms)Aws Network FirewallAws Security HubAws ShieldAws Transit GatewayAws Web Application Firewall (Waf)BashCi/CdDevsecopsFedrampFismaInfrastructure As Code (Iac)KubernetesNist 800-171Nist 800-53Palo Alto NetworksPalo Alto PanoramaPrisma CloudPythonSIEMSoarTerraform
ComPsych