Cloud Security Engineer

F2Onsite is seeking an experienced Cloud Security Engineer to lead the design, implementation, and operationalization of a cloud security program across a complex, multi-cloud and SaaS-heavy enterprise environment. The role involves building a scalable cloud security program, conducting security assessments, and integrating cloud assets into ServiceNow workflows.

Responsibilities:

• Build an authoritative inventory of all cloud properties across AWS, Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI), and material SaaS applications
• Reconcile cloud assets into the ServiceNow CMDB using the appropriate cloud asset classes
• Develop and implement a scalable cloud security program across a multi-cloud enterprise environment
• Conduct cloud security posture assessments against industry frameworks, including:
• CIS Benchmarks
• Cloud Security Alliance (CSA)
• NIST Cybersecurity Framework (CSF) 2.0
• Assess and document:
• IAM security gaps
• Network exposure risks
• Logging and monitoring deficiencies
• Encryption and key management controls
• Risk-rank findings, assign ownership, and surface results through ServiceNow posture dashboards
• Design and build cloud account onboarding and monitoring workflows within ServiceNow
• Develop automated onboarding processes to support mergers and acquisitions (M&A) and rapid cloud expansion
• Integrate cloud assets into the CMDB and support ServiceNow SecOps workflows
• Onboard cloud telemetry into:
• CrowdStrike Falcon Cloud Security
• CrowdStrike NG-SIEM
• Obsidian SSPM
• Varonis DSPM
• Configure cloud log forwarding through Cribl into NG-SIEM
• Tune detections and ensure alerts are routed appropriately into Security Operations
• Develop operational runbooks and standard operating procedures
• Operate the cloud security program in steady-state following implementation
• Provide weekly project status updates and implementation progress
• Support continuous onboarding of new cloud environments in a fast-paced acquisition environment
• Utilize frontier AI models such as ChatGPT Enterprise and Claude to accelerate:
• Cloud inventory analysis
• Security posture assessments
• Workflow development
• Runbook creation
• Documentation
• Apply AI responsibly while following enterprise governance and security best practices

Requirements:

• Hands-on experience securing multi-cloud environments including: AWS, Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI) is a plus
• Strong knowledge of: Cloud Security Posture Management (CSPM), Identity & Access Management (IAM), Cloud networking and exposure management, Encryption and key management, Cloud logging, monitoring, and telemetry
• Hands-on ServiceNow experience building workflows and integrating with the CMDB (required and non-negotiable)
• Experience integrating cloud telemetry into SIEM and log management platforms
• Experience with cloud account onboarding and governance processes
• Proficiency using frontier AI models, including ChatGPT Enterprise and Claude, to support security engineering workflows
• Strong technical writing and documentation skills
• Ability to work independently from discovery through operational maturity with minimal oversight
• CrowdStrike Falcon Cloud Security
• CrowdStrike NG-SIEM
• Obsidian SSPM
• Zscaler (ZIA/ZPA)
• Varonis DSPM
• Cribl
• Okta
• Terraform or other Infrastructure-as-Code (IaC) platforms
• Industry experience in Insurance
• Industry experience in Financial Services
• Industry experience in Other regulated industries (GLBA, NY Client 500)
• AWS Security Specialty
• Microsoft Azure Security Engineer
• Google Professional Cloud Security Engineer
• CCSP
• CISSP
• GIAC Cloud Security certifications
• Equivalent hands-on experience will be considered in place of certifications