Cloud Security Engineer

Peraton is currently seeking skilled and qualified candidates for our Cloud Security Engineer position. This position will collaborate closely with our customers, internal teams, and ISSOs/ISSMs to ensure that security best practices are integrated into the build and maintenance processes. This position aids the development, modernization, and migration in support of a government multi-cloud environment with 30+ customer tenants and growing.

This person must have security engineering experience and extensive cloud knowledge and experience with integration, system analysis or programming experience, including developing cloud systems requirements and design specification.

Day to Day Work Responsibilities:

• Implement and enforce security policies and practices in line with standards and regulatory requirements
• Conduct regular security assessments and vulnerability scans of Windows and Linux systems
• Apply STIGs to ensure compliance with security protocols
• Perform regular audits to assess security posture and compliance
• Use Nessus to conduct vulnerability scans and address identified issues
• Collaborate with security team to monitor and respond to security incidents
• Work with customer to understand their requirements and provide expert guidance on security compliance and vulnerability remediation
• Provide technical support and troubleshooting for related issues
• Document processes, configurations, and best practices for customers

Basic Qualifications:

• Bachelor’s degree with 5+ years’ experience or high school diploma/GED with 9+ years’ experience.
• U.S. Citizenship; must have the ability to obtain and maintain a Public Trust security clearance.
• 5+ years of experience in System Engineering within cloud environment (AWS and/or Azure)
• 5+ years of working on cloud platforms (AWS and Azure)
• Expertise with security practices such as STIGs and remediating system vulnerabilities
• Proficiency in using Nessus for vulnerability scanning and remediation
• Experience conducting security audits and addressing compliance issues
• Familiarity with managing systems in the cloud and infrastructure-as-code tools, such as Terraform and Ansible

Preferred Qualifications:

• Security+, CISSP, CASP, OR CySA certification