Cloud Engineer

Summary

The Cloud Engineer is a highly experienced, hands‑on engineering role responsible for the stability, security, and continued evolution of the organization’s core cybersecurity platforms. This role provides technical ownership and day‑to‑day management of security systems including Tenable/Nessus, Varonis, the Microsoft security stack (Defender and Purview), Splunk, and Azure security services.

Responsibilities

• Serve as a subject matter expert for enterprise cybersecurity platforms including Tenable/Nessus, Varonis, Microsoft Defender, Microsoft Purview, Splunk, and Azure security services.
• Design, implement, and maintain a stable, secure, and scalable security tooling environment across cloud and hybrid infrastructure.
• Engineer and continuously improve vulnerability management capabilities, including scan coverage, asset classification, prioritization, workflows, and integrations.
• Develop and expand data loss prevention and data protection use cases using Varonis and Microsoft Purview.
• Increase security value by identifying and implementing new use cases from existing tools that were previously unused or underutilized.
• Write and maintain automation and integration code (Python, PowerShell, Bash) to reduce manual effort and increase consistency.
• Provide Tier3 operational support including troubleshooting platform issues and participating in incident investigations.
• Perform root-cause analysis for platform and security issues and implement long-term corrective actions.
• Create and maintain high-quality technical documentation including runbooks, operational procedures, and design documentation.
• Collaborate closely with other teams on roadmap planning, tool onboarding, and architectural decisions.
• Mentor and provide technical guidance to less experienced engineers on the team.
• All other duties as assigned.

Basic Requirements

• 6+ years of experience in cybersecurity engineering, security operations, or platform security roles.
• Hands-on experience managing and engineering enterprise deployments of Varonis, Tenable/Nessus, Microsoft Defender and Purview, Splunk, and Azure Security Services.
• Strong experience with vulnerability management and data loss prevention/data protection.
• Solid working knowledge of windows and linux systems.
• Proficiency in at least one scripting or programming language (python, powershell, bash).
• Demonstrated ability to apply an engineering and root-cuase-oriented approach to security problems.
• Experience operating security tooling in cloud and hybrid environments.

Preferred Requirements

• Experience with container security (AKS, ACA, on-prem Kubernetes)
• Experience integrating security tools with ServiceNow
• Familiarity with SIEM detection engineering concepts and security logging pipelines.
• Knowledge of security frameworks and models such as NIST CSF, CIS Controls, and MITRE ATT&CK
• Relevant certifications