Cloud Security Engineer (Cloud Security)

Location: Remote within the United States; availability required Monday–Friday, 8am–5pm EDT, with evening and weekend on-call shifts when needed.

Company

hirify.global creates workplace experience solutions for organizations and supports customers through a global office network and flexible work culture.

What you will do

• Design, implement, optimize, and monitor secure cloud architectures across GCP, Azure, and AWS, with a strong emphasis on GCP.
• Review and resolve SIEM and other security alerts as a Level-2 Security Operations team member, expanding alerting and reporting capabilities.
• Support customer security questionnaires, calls, workshops, presentations, and technical documentation, including network, architecture, and data-flow diagrams.
• Secure SaaS applications through IAM, encryption, API security, configuration baselines, firewall reviews, access reviews, system reviews, and risk assessments.
• Lead compliance initiatives, security assessments, gap analyses, incident response planning, and remediation for frameworks including GDPR, SOC 2, ISO 27001, CMMC, and CSA STAR.
• Research emerging cloud security threats and technologies and provide strategic guidance to technical and non-technical stakeholders.

Requirements

• Bachelor’s degree in Computer Science, Risk Management, Cyber Security, or a related field.
• 7–10 years of progressive cloud security experience, including 4+ years securing, configuring, and supporting Azure and GCP environments.
• 4+ years supporting a security operations center, managing security alerts, configuring SIEMs, and creating custom alerts with PowerShell, Python, or Bash.
• CISSP certification is required.
• Hands-on experience with Azure or GCP security services, cloud security alerts, Entra ID, and Azure Cloud features.
• Experience securing SaaS applications, applying multi-cloud IAM principles, and implementing network security in cloud environments.
• Knowledge of compliance frameworks and regulations, including GDPR, SOC 2, ISO 27001, and CMMC.
• Strong organizational, project management, communication, presentation, problem-solving, and attention-to-detail skills; ability to work independently, multitask, and operate in a fast-paced client-facing environment.

Nice to have

• Experience with IaC tools such as Terraform, CloudFormation, or ARM templates for security automation.
• Scripting skills with Python, PowerShell, or Bash.
• Container security experience with Docker or Kubernetes.
• Knowledge of DevSecOps principles and practices.

Culture & Benefits

• Remote work opportunities and flexible work schedules for US-based team members.
• Medical, dental, and vision coverage; disability coverage; employer-paid life insurance; mental health resources; and a 401(k) plan.
• Fully paid parental leave, generous PTO, and paid company holidays.
• Quiet Fridays with no non-essential internal meetings and a casual dress environment.
• Competitive salary practices, with compensation determined by experience, skills, certifications, and overall fit; applicable pay ranges are discussed during the application process where required.