Cloud Security Engineer

About the role

The Cloud Security Engineer position at Everforth ECS is located in Fairfax, VA. This role involves designing, implementing, configuring, and maintaining cybersecurity technologies, tools, and secure infrastructure capabilities across enterprise systems and security operations environments.

Responsibilities

• Implement, configure, maintain, and support cybersecurity technologies, tools, platforms, and technical security controls.
• Aid in engineering secure solutions for enterprise systems, networks, endpoints, cloud environments, applications, and operational support platforms.
• Provide input, technical feasibility analysis, and operational considerations for security architecture decisions.
• Apply security engineering practices across the system lifecycle, including planning, deployment, configuration, testing, operations, and sustainment.
• Apply secure configuration baselines, hardening standards, and technical control requirements to servers, endpoints, network devices, applications, and Azure cloud services.
• Support implementation of vulnerability remediation, configuration changes, patching activities, and risk reduction measures in coordination with system owners.
• Validate that security controls are operating as intended and support remediation when control gaps or technical weaknesses are identified.
• Support deployment, tuning, and sustainment of tools such as SIEM, EDR, vulnerability scanners, firewalls, IDS/IPS, email security, identity security, logging, and monitoring platforms.
• Integrate security tools with enterprise systems, data sources, ticketing systems, dashboards, identity platforms, and incident response workflows.
• Troubleshoot tool performance, connectivity, data collection, alerting, agent health, policy enforcement, and integration issues.
• Coordinate with SOC analysts, engineers, threat hunters, and system administrators to ensure security tooling supports monitoring, investigation, and response requirements.
• Analyze vulnerability scan results, configuration findings, security alerts, and control weaknesses to support prioritization and remediation planning.
• Work with technical teams to identify root causes, validate remediation options, and confirm closure of vulnerabilities or security findings.
• Support risk treatment activities by documenting technical constraints, compensating controls, residual risk, and remediation status.
• Assist control assessors and assessment leads by providing technical evidence, configuration details, screenshots, logs, and implementation explanations.
• Provide technical engineering support during security incidents, investigations, containment activities, eradication efforts, and recovery actions.
• Develop and maintain scripts, queries, automation, and repeatable procedures to improve security operations and engineering response efficiency.
• Participate in after-action reviews and support implementation of technical improvements based on incident lessons learned.
• Develop and maintain technical documentation, configuration standards, diagrams, implementation guides, runbooks, and operational procedures.
• Support change management, configuration management, asset documentation, and security engineering governance processes.
• Recommend improvements to security tools, engineering processes, baselines, automation, monitoring coverage, and technical control implementation.
• Stay current with emerging threats, security technologies, hardening guidance, and engineering best practices relevant to enterprise security environments.

Qualifications

• U.S. Citizen with an active DoD Secret security clearance.
• Bachelor’s degree with 5+ years of experience in cybersecurity engineering, security operations, systems administration, network administration, cloud security, or related technical security roles.
• Active DoD 8140 IAT Level II Security+ (or higher).
• Experience with Microsoft Azure-based security tools, technical controls, secure configurations, and enterprise security technologies.
• Hands-on experience with Windows, Linux, networking, identity and access management, endpoint security, logging, vulnerability management, and common security architectures.
• Familiarity with cybersecurity frameworks, standards, and best practices such as NIST, CIS Controls, DISA STIGs, ISO 27001, or organizational security baselines.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Skills

• Hands-on experience with Microsoft Azure-based security tools, technical controls, secure configurations, and enterprise security technologies.
• Experience with Windows, Linux, networking, identity and access management, endpoint security, logging, vulnerability management, and common security architectures.
• Experience applying security requirements, hardening standards, vulnerability remediation guidance, and configuration baselines across Azure Cloud environments.
• Experience troubleshooting technical security issues involving systems, networks, applications, integrations, agents, logs, policies, and monitoring tools.
• Familiarity with cybersecurity frameworks, standards, and best practices such as NIST, CIS Controls, DISA STIGs, ISO 27001, or organizational security baselines.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Benefits

General Description of Benefits: Health insurance, retirement plan, paid time off, professional development opportunities, and more.

Pay

Salary Range: $120,000 - $160,000

Schedule

Hybrid capacity in Fairfax, VA (up to 3 days in office), with occasional travel to CONUS / OCONUS customer sites and government installations.

Other duties, as assigned.