Senior Cloud Security Engineer
Peraton · UNAVAILABLE, UNAVAILABLE, US
About this role
## Senior Cloud Security Engineer ### Overview Peraton is seeking a **Senior Cloud Security Engineer** to lead proactive threat hunting, vulnerability analysis, and remediation in a **multi-cloud environment** supporting **70+ customer tenants**. ### Responsibilities - Plan and conduct **hypothesis-driven threat hunts** across **AWS, Azure, GCP, and OCI** using **MITRE ATT&CK** and threat intelligence. - Analyze cloud-native telemetry (e.g., **AWS CloudTrail/GuardDuty**, **Microsoft Defender for Cloud/Azure Monitor**, **Google Security Command Center**, **OCI Cloud Guard/Audit logs**) alongside **SIEM data** to investigate suspicious activity. - Administer and optimize **Qualys** and **Tenable** scanning across all cloud tenants, including scan policies, agent/connector deployment, asset coverage, and credentialed scanning. - Analyze vulnerabilities and configuration findings: eliminate false positives and prioritize remediation by **exploitability, asset criticality, and exposure** (including **CISA KEV**). - Lead remediation of identified threats and vulnerabilities with engineering and patching teams; verify closure through **rescanning**. - Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and **STIG/CIS benchmark** deviations. - Develop and tune detection rules, queries, and automated hunt playbooks to make successful hunts repeatable. - Support incident response as a senior technical resource (scoping, containment recommendations, root cause analysis). - Produce hunt reports, remediation tracking, and **POA&M** inputs; brief findings and risk to customers, **ISSO/ISSMs**, and leadership. - Mentor junior security engineers in threat hunting, vulnerability analysis, and tool usage. ### Location & Work Hours - **Remote** (must reside and perform all work within the **United States**) - **8:00 AM – 5:00 PM Eastern**, online ### Qualifications **Basic Qualifications** - Bachelors + **12 years** experience, or Masters + **10 years**, or Associates + **14 years**, or High School + **16 years** - **U.S. Citizen** with ability to obtain/maintain a **DHS Public Trust** - **8+ years** in information security, including **5+ years** in cloud security engineering - Hands-on security experience in **at least three**: **AWS, Azure, GCP, OCI** - Expertise with **Qualys** (VMDR, Cloud Agent, Policy Compliance) and **Tenable** (Tenable.io, Tenable.sc, Nessus) - Demonstrated threat hunting/investigations using **MITRE ATT&CK** - Proficiency writing queries and analyzing logs in a SIEM/log platform (e.g., **Splunk, Microsoft Sentinel, Elastic**, or equivalent) - Experience remediating vulnerabilities/misconfigurations on **Windows/Linux**, **containers**, and cloud-native services - In-depth understanding of cloud **IAM, network security, encryption, and logging architecture** - Scripting/automation experience in **Python, PowerShell, or Bash**; familiarity with **Terraform/Ansible** - Working knowledge of **STIGs, CIS Benchmarks, and NIST 800-53** **Preferred Qualifications** - Relevant certifications such as **CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security – Specialty, Microsoft AZ-500,** or **Google Professional Cloud Security Engineer** ### Target Salary Range **$135,000 – $216,000** (typical range; final offer depends on experience, education, skills, location, and business/contract factors). May include overtime, shift differential, and discretionary bonus depending on role. ### Benefits
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.