Remote Junior Cloud & Application Security Engineer

StopAHack.com® is a veteran-founded cybersecurity and technology services company and a Great Place To Work® certified employer that delivers hands-on expertise to client programs and partner-led engagements. The Junior Cloud & Application Security Engineer will support cloud, application, and compliance security operations using Wiz, Socket Security, and Vanta. Responsibilities include triaging findings, investigating risks, supporting remediation, maintaining security tooling, documenting issues, and coordinating with engineering, cloud, IT, security, and compliance teams.

Responsibilities:

• Monitor and triage cloud security findings in Wiz
• Investigate misconfigurations, vulnerabilities, exposed resources, identity risks, secrets, and attack paths
• Help validate findings and prioritize remediation based on severity, exposure, and business impact
• Support Wiz policies, controls, dashboards, reports, integrations, and exceptions
• Review Socket Security alerts involving open-source dependencies, package behavior, malware, typosquatting, install scripts, and other software supply-chain risks
• Work with developers to investigate dependency alerts and determine whether packages should be approved, updated, replaced, or removed
• Monitor Socket findings in GitHub pull requests and assist with repository onboarding and configuration
• Monitor Vanta compliance tests, integrations, controls, evidence, access reviews, and remediation tasks
• Investigate failed Vanta tests and work with system owners to collect evidence or correct security control deficiencies
• Support frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, or comparable security and compliance standards
• Create and track remediation tickets in Jira, ServiceNow, or another ticketing platform
• Maintain clear investigation notes, operating procedures, and audit-ready documentation
• Work with security, cloud, DevOps, engineering, IT, and compliance stakeholders
• Escalate high-risk, complex, or potentially exploitable findings to senior engineers
• Work under the direction of senior security engineers, architects, or security program leadership
• Coordinate daily activities with assigned security, cloud, development, and compliance teams
• Escalate complex technical decisions and high-risk findings to senior personnel
• Receive performance management and HR support from StopAHack

Requirements:

• • Approximately 1 to 3 years of professional experience in cybersecurity, cloud security, application security, DevSecOps, vulnerability management, compliance operations, or a related area
• • Hands-on professional experience using Wiz, Socket Security, and Vanta
• • Ability to navigate each platform, review alerts or failed checks, gather supporting evidence, and track remediation
• • Foundational knowledge of at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform
• • Understanding of cloud security risks involving identity, permissions, networking, storage, logging, encryption, vulnerabilities, and exposed resources
• • Familiarity with GitHub, pull requests, package manifests, open-source dependencies, and software supply-chain risks
• • Familiarity with compliance controls, automated tests, evidence collection, and audit preparation
• • Experience documenting findings and communicating remediation requirements to technical teams
• • Ability to distinguish legitimate risks from false positives and escalate issues when necessary
• • Strong attention to detail, troubleshooting ability, and willingness to learn
• • Remote within the United States
• • Standard business hours aligned with the assigned team
• Applicants must be authorized to work in the United States without current or future sponsorship
• • Experience with more than one of AWS, Azure, and GCP
• • Familiarity with Wiz Security Graph, attack paths, policies, and cloud integrations
• • Experience with Socket's GitHub application, CLI, alerts, or repository configuration
• • Experience maintaining Vanta integrations or supporting SOC 2 or ISO 27001 readiness
• • Familiarity with Jira, ServiceNow, GitHub Issues, Slack, or Microsoft Teams
• • Basic experience with Python, PowerShell, Bash, APIs, JSON, or YAML
• • Familiarity with Terraform or other infrastructure-as-code technologies
• • CompTIA Security+, AWS, Microsoft Azure, Google Cloud, or similar certifications
• • Associate's or bachelor's degree in cybersecurity, information technology, computer science, or a related field. Equivalent professional experience may be considered