Senior Cloud Security Engineer

Cherokee Federal is hiring a Senior Cloud Security Engineer to support cloud security operations for the U.S. National Science Foundation. The role identifies and mitigates cloud vulnerabilities, monitors and responds to security incidents, assesses infrastructure, and strengthens security controls and risk management practices.

Responsibilities:

• Identify, analyze, and mitigate vulnerabilities and configuration issues in cloud-based systems
• Monitor cloud environments for security breaches and respond to incidents to minimize their impact
• Assess cloud systems, identify security weaknesses, and recommend corrective actions
• Develop, implement, and update cloud security protocols and procedures
• Conduct gap analyses and recommend improvements to security controls and risk management processes
• Develop and implement risk management programs to strengthen the security of cloud assets
• Use and optimize cloud security tools to detect, prevent, and respond to threats
• Improve monitoring and response capabilities
• Work with cross-functional teams to align security measures with business objectives and industry best practices
• Advise internal stakeholders on cloud security policies, procedures, and standards
• Track emerging cloud security threats, vulnerabilities, and practices, and adapt security measures accordingly
• Perform other job-related duties as assigned

Requirements:

• At least eight years of cybersecurity experience, including at least three years focused on cloud security and vulnerability management
• In-depth knowledge of cloud infrastructure, such as AWS, Azure, or Google Cloud, and cloud security tools, such as AWS GuardDuty or Prisma Cloud Compute
• Experience in security incident response, risk management, and vulnerability mitigation in cloud environments
• Strong analytical skills, including the ability to conduct gap analyses and develop actionable plans to address security weaknesses
• This position requires an active Public Trust clearance
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Relevant certification, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, or CISSP
• Experience with cloud-native security tools and security information and event management (SIEM) solutions for cloud environments
• Knowledge of risk management frameworks and compliance standards, such as NIST and ISO 27001
• Strong communication and problem-solving skills, including the ability to work across teams and explain technical concepts to nontechnical stakeholders