Cloud Native Security

Cloud Native Security Cybersecurity Jobs

5 jobs found

Today

Senior Security Engineer - Container & Cloud Security

Ecco Select New York, NY

New York, NY

Today

$65 - $65/hr Contract Cloud Native Security Cloud Native Workload Protection Cloud Platforms

Apply Now

Job Description

Sr. Security Engineer on a policy-as-code team focused on automating container and cloud security governance across Azure and GCP with Wiz.

Responsibilities

Design, implement, and maintain cloud-native container security controls for Kubernetes platforms including AKS, GKE, and EKS.
Develop, tune, and maintain container threat detection rules to identify malicious activity, anomalous behavior, and indicators of compromise.
Monitor runtime security events, investigate alerts, and support triage and incident response for container and Kubernetes workloads.
Deploy and optimize Wiz Defend/CWPP capabilities, including runtime sensors, workload protection, and attack path analysis.
Create and automate security guardrails using Infrastructure as Code (Terraform, Helm) and GitOps, including admission controller policies and preventative controls.
Strengthen container software supply chain with image scanning, SBOM validation, image signing, and registry security.
Identify, prioritize, and remediate container vulnerabilities and misconfigurations using risk-based exposure analysis.
Develop and maintain Compliance-as-Code policies aligned to CIS, NIST, and STIG security benchmarks.
Route Wiz findings and threat intelligence into ServiceNow and enterprise vulnerability management workflows.
Partner with Security Operations, Cloud Engineering, DevSecOps, and application teams to improve detection coverage and cloud security posture.
Conduct threat hunting and proactive analysis to improve detection logic and enhance runtime protection capabilities.
Support post-incident reviews with root cause analysis, corrective action recommendations, and continuous improvement of detection and response.

Requirements

Strong cloud security knowledge across AI/ML platforms, model pipelines, data layers, IAM, networking, and logging.
Hands-on Wiz CNAPP expertise (CSPM, CIEM, DSPM, CWPP), including applying it to AI workloads, model hosting, and data pipelines.
Experience designing preventive and detective security controls across model, data, and platform layers.
Compliance-as-Code fluency, including mapping Wiz findings to STIGs, native cloud policies, CI/CD, and governance workflows.
Ability to interpret Wiz risk graphs and communicate risk-based exposure analysis for model misuse, data leakage, privilege escalation, and blast radius.
Kubernetes experience across AKS, GKE, and EKS.
Working knowledge of Terraform, Helm, and GitOps-based pipelines.

Technologies

Wiz, Wiz Defend, CWPP, CSPM, CIEM, DSPM
Kubernetes, AKS, GKE, EKS
Terraform, Helm, GitOps, Azure, GCP
CIS, NIST, STIG
ServiceNow
Container image scanning, SBOM, image signing, registry security
Admission controller, Infrastructure as Code, CI/CD

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Retirement plan
Vision insurance

Nice to have

Direct, hands-on Wiz platform experience is a significant plus.
Container image/repository scanning experience.
Deeper Terraform or IaC pipeline background.
Open to strong, trainable candidates with somewhat less hands-on experience, as long as foundational cloud and container security skills are solid.

Contract details

Duration: 6 months initial; strong intent to convert to full-time
Engagement length: engagements on this team have extended up to 4 years
Schedule: full-time, approximately 3 days/week onsite
Pay: USD 65 per hour

Location & work authorization

Work location: Hybrid remote in New York, NY 10001
Primary location: New York, NY (hybrid)
Secondary location: NY tri-state area (NJ, Philadelphia, NYC) considered
Strong preference: Toronto, ON
Work authorization: GC or USC only

Interview process

Panel interview with the Hiring Manager and two technical leads

View full job page →

Today

Sr. Cloud and AI Security Engineer

Maxonic, Inc. Dublin, CA

Dublin, CA

Today

$150k - $160k/yr Full time Ai Security Application Security Application Security Posture Management

Apply Now

Job Description

Maxonic, Inc. is seeking a Sr. Cloud and AI Security Engineer based in Dublin, CA for an onsite role. This position focuses on designing, implementing, and maintaining security tooling that monitors and protects cloud workloads from evolving threats, with emphasis on posture management, zero trust access, and automated remediation.

Working closely with governance and risk stakeholders, you will help translate business priorities into secure technical roadmaps, while building scalable controls across cloud-native environments and AI posture management.

Role Overview

Design, implement, and maintain security tools to monitor and protect against security threats targeting company cloud workloads.
Identify and mitigate potential cloud-based security risks.
Build and manage posture management capabilities and related security controls across cloud and SaaS environments.
Develop automation scripts that support threat remediation.
Partner with GRC teams to align security roadmaps with business goals.

Responsibilities

Develop and deploy security controls including container security, data security posture management, application security posture management, SaaS security posture management, and a zero trust network.
Implement and manage posture management systems, general cloud security, and log management.
Support cloud-native workload protection, context-aware access policies, secure web gateways, and data security.
Collaborate with Information Security Governance, Risk, and Compliance to develop global cloud security technical designs, architecture standards, and maturity roadmaps.
Maintain documentation, technical diagrams, and self-healing automation scripts for security tools, system environments, and cloud operations.
Lead assessment, evangelization, and adoption of new security tools, applications, and processes as a Subject Matter Expert (SME) across cloud security, posture management, logging and monitoring, secure hybrid access solutions, data pipeline security, and AI posture management.
Understand business objectives and supporting systems/processes across key business areas, aligning technical solutions with enterprise needs while balancing strong security controls with compatibility and operational efficiency.

Requirements

Minimum 10 years of Information Security experience, including 5+ years in large enterprise environments.
Bachelor's degree or equivalent experience; cloud security certification preferred.
Strong knowledge of security threats, detection and response, security analytics, and automation/orchestration tools.
Ability to work independently and within teams to deliver technical solutions.
Experience developing security strategies, standards, and architectures aligned with industry frameworks.
Ability to improve security posture using technical, administrative, and physical controls.
Experience collaborating with IT teams to design and implement enterprise security solutions.
Experience selecting, configuring, and implementing security tools aligned with business needs.
Knowledge of identity and access management, Zero Trust principles, and secure access solutions.
Strong documentation and communication skills to translate security requirements into actionable designs.

Technologies

zero trust network
container security
data security posture management
application security posture management
SaaS security posture management
posture management systems
log management
cloud-native workload protection
context-aware access policies
secure web gateways
secure hybrid access solutions
data pipeline security
AI posture management
automation/orchestration tools
self-healing automation scripts
identity and access management

Job Details

Job Type: Fulltime
Work Schedule: Onsite
Work Location: In person
Location: Dublin, CA (onsite)

Pay

USD 150,000 - 160,000 per year

Application

Please apply with your most current resume.
Contact: Surya Prakash (surya.prakash@maxonic.com / (408) 400-2314) for more details.

Additional Competency Emphases

Strong Analytical Skills
Navigate Ambiguity
Solution oriented leadership

Physical Requirements (ADA)

Ability to work in an office environment, primarily on a computer.
Requires sitting, standing, walking, hearing, talking on the telephone, attending in-person meetings, typing, and working with paper/files.
Consistent timeliness and regular attendance.
Vision requirements: ability to see information in print and/or electronically.

View full job page →

2d ago

Cloud Security Engineer

Deloitte Washington, DC

Washington, DC

2d ago

$108k - $188k/yr Full time Azure Cloud Native Security Cloud Platforms

Apply Now

Job Description

Deloitte is hiring a Cloud Security Engineer to strengthen security across cloud platforms, including AWS, GCP, and Microsoft Azure. The role focuses on assessing risk, designing and improving security controls, investigating security events, and supporting cloud risk management through documentation and standards.

Location

Washington, DC (onsite)

Salary

USD 107,925 - 188,000 per year

Responsibilities

Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and configuration issues.
Design, implement, and improve cloud security controls, including identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for new and existing solutions and provide recommendations aligned to security and compliance requirements.
Investigate cloud security events and findings, analyze root causes, and support remediation with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field.
Active Secret Clearance.
Local to the DMV area and able to work onsite up to 5 days a week.
Ability to travel 20% on average, based on work scope and client needs.
At least 2+ years experience supporting cloud security, cloud engineering, or cloud infrastructure, including:
- Implementing or assessing security controls in AWS, GCP, and Microsoft Azure.
- Experience with cloud identity and access management, network security, encryption, logging, monitoring, and configuration management.
- Experience using cloud-native security tools, security posture management tools, and infrastructure as code tools.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Technologies

Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure
Identity and access management, network security, encryption, logging, monitoring, configuration management
Cloud-native security tools, security posture management tools, infrastructure as code tools

Team Overview

Deloitte’s Government & Public Services (GPS) practice is designed for impact.
Supports federal, state, and local government clients as well as public higher education institutions.
Enterprise Security embeds security across digital transformation by securing a client’s technical backbone while enabling secure digital transformation.
Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Preferred

Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs.
Experience with security frameworks and benchmarks such as NIST, CIS, or ISO.
Experience with scripting or automation using Python, PowerShell, Bash, or Terraform.
Experience with container security, Kubernetes, or DevSecOps practices.
Relevant industry certifications such as AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP.

Incentive Program

You may be eligible to participate in a discretionary annual incentive program, subject to program rules. Any award depends on factors including individual and organizational performance.

View full job page →

3d ago

Cloud Security Engineer

Deloitte Baltimore, MD

Baltimore, MD

3d ago

$108k - $188k/yr Full time Cloud Logging & Monitoring Cloud Native Security Cloud Platforms

Apply Now

Job Description

Deloitte’s Government & Public Services (GPS) practice is focused on impact for federal, state, and local government clients and public higher education institutions. Within Enterprise Security, the team embeds security into digital transformation by securing a client’s technical backbone while enabling secure cloud adoption. This Cloud Security Engineer role supports cloud security architecture, engineering, monitoring, and risk reduction across AWS, GCP, and Microsoft Azure.

This position is based in Baltimore, MD and requires onsite work up to 5 days a week. The salary range is USD 107,925 - 188,000 per year, and the role calls for at least 2 years of relevant experience.

What you’ll do

Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and configuration issues.
Design, implement, and improve cloud security controls, including identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for new and existing solutions, providing recommendations aligned to security and compliance requirements.
Investigate cloud security events and findings, analyze root causes, and support remediation with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports for cloud security controls and cloud risk management.

What you bring

Ability to work independently and collaborate as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
Strong interpersonal skills and professional demeanor, with the ability to meet deadlines.
Ability to provide clear guidance to others.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field.
Active Secret Clearance.
Local to the DMV area and able to work onsite up to 5 days a week.
Ability to travel 20% on average based on client needs and industries/sectors served.
Supporting experience in cloud security, cloud engineering, or cloud infrastructure.
Experience implementing or assessing security controls in AWS, GCP, and Azure.
Experience with cloud identity and access management, network security, encryption, logging, monitoring, and configuration management.
Experience using cloud-native security tools, security posture management tools, or infrastructure as code tools.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Tools and technologies

Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure
Identity and access management, network security, encryption, logging, monitoring, configuration management
Cloud-native security tools, security posture management tools, infrastructure as code tools

Team focus

Deloitte GPS Government & Public Services is designed for impact and serves federal, state, and local government clients and public higher education institutions.
Enterprise Security embeds security across digital transformation, including security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Incentive program

You may also be eligible to participate in a discretionary annual incentive program, subject to program rules. Any award, if any, depends on various factors including individual and organizational performance.

Preferred qualifications

Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs.
Experience with security frameworks and benchmarks such as NIST, CIS, or ISO.
Experience with scripting or automation using Python, PowerShell, Bash, or Terraform.
Experience with container security, Kubernetes, or DevSecOps practices.
Industry certifications such as AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP.

View full job page →

3d ago

Senior Application Penetration Tester

Chubb Philadelphia, PA

Philadelphia, PA

3d ago

Full time Senior Ai Enabled Security Ai Security

Apply Now

Job Description

Senior Application Penetration Tester focuses on planning and executing security testing across modern application types, then driving remediation visibility and risk reporting to technical and executive stakeholders.

Responsibilities

Plan and conduct penetration tests for web, mobile (iOS & Android), APIs, cloud-native/containerized systems, and AI/LLM-integrated applications
Assess AI/ML and generative AI features for risks including prompt injection, insecure output handling, training data poisoning, model denial of service, and sensitive information disclosure using guidance aligned to OWASP Top 10 for LLM Applications and MITRE ATLAS
Collaborate with AI/ML engineering and data science teams to threat-model AI-powered features and embed security testing into MLOps and CI/CD pipelines
Evaluate cloud-native and containerized workloads and Infrastructure as Code for misconfigurations and weak security controls across AWS, Azure, GCP, Docker, and Kubernetes
Test modern API architectures including REST, GraphQL, and gRPC, with attention to OAuth2, OIDC, and JWT authentication/authorization flaws and microservices-based applications
Perform mobile application security testing and reverse engineering, including analysis for hardcoded credentials, insecure keychain storage, and anti-emulator/obfuscation bypass
Own overall vulnerability remediation status for the global application portfolio and act as a primary contact for application teams on remediation
Manage application risk rating processes and support timely risk scoring for new and changing applications
Build and maintain dashboards and status reports for portfolio leads and CIOs, including follow-up on overdue vulnerabilities to meet compliance timelines
Create clear, actionable penetration test reports and communicate findings and a remediation strategy to both technical and executive stakeholders
Research emerging attack techniques and tooling, and drive automation and process improvements across the testing program

Requirements

Prior experience managing Information Security projects
Bachelor’s Degree in Computer Science, Engineering, or another Engineering or Technical discipline, or equivalent relevant experience
Minimum 2 years of professional experience performing penetration testing for web application, API endpoint, and mobile (iOS & Android)
Knowledge of prioritizing remediation activities with operational teams using risk ratings of vulnerabilities and assets
Knowledge of vulnerability management standards, including CVE and CVSS
Knowledge across network security, wireless security, application security, infrastructure hardening and security baselines, and web server and database security
Knowledge of penetration testing principles, tools, and techniques
Working experience with industry frameworks such as OWASP, OWASP API Security Top 10, OWASP Top 10 for Large Language Model (LLM) Applications, NIST, NIST AI Risk Management Framework, and MITRE ATT&CK
Comfort working outside comfort zone with willingness to learn
Excellent verbal and written communication skills
Strong analytical skills
Strong team player with ability to work independently
Strong project management skills and ability to multi-task
Self-motivated with strong initiative
Knowledge of computer networking concepts and protocols and application security methodologies
Skill in performing impact/risk assessments
Familiarity with modern application architectures including cloud-native (AWS, Azure, GCP), containerized (Docker, Kubernetes), microservices, and API-first designs (REST, GraphQL, gRPC)
Foundational understanding of AI/ML and generative AI security risks such as prompt injection, model manipulation, and sensitive data leakage is a plus

Technologies

AWS, Azure, GCP, Docker, Kubernetes, Infrastructure as Code
REST, GraphQL, gRPC, OAuth2, OIDC, JWT
MLOps, CI/CD
OWASP, OWASP API Security Top 10, OWASP Top 10 for Large Language Model (LLM) Applications, OWASP Top 10 for LLM Applications
NIST, NIST AI Risk Management Framework, MITRE ATT&CK, MITRE ATLAS
CVE, CVSS
Kali Linux, Metasploit, Nmap, Burp Suite, OWASP ZAP, Santoku
Genymotion, APKTool, JD-GUI, SQLMap, Semgrep, Snyk, Checkmarx, AppScan, Veracode
Trivy, Grype, Prowler, ScoutSuite, Garak, PyRIT, OWASP ASVS
OSCP, OSWE, GWAPT, GPEN, CEH, GCPN, CCSP
LangChain, Semantic Kernel, AutoGen, RAG vector databases

Location: Philadelphia, PA (onsite)

View full job page →

Cloud Native Security Cybersecurity Jobs

Senior Security Engineer - Container & Cloud Security

Sr. Cloud and AI Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Senior Application Penetration Tester

Get Cloud Native Security Cybersecurity Jobs alerts