The Cloud Security Engineer will support Lumen Security Advisory Services by helping customers identify and reduce security risk across cloud and on-premises environments. The role emphasizes cloud security posture assessments, vulnerability scanning, remediation planning, and customer-facing technical discussions.

Key Responsibilities

Support cloud security posture assessments across AWS, Azure, and Microsoft 365 environments.
Identify cloud misconfigurations, security gaps, exposed resources, and vulnerabilities using cloud-native and custom assessment tools.
Assess environments against CIS Benchmarks, cloud security best practices, and applicable customer requirements.
Deploy, configure, and tune vulnerability scanning platforms within customer environments.
Analyze vulnerability scan results by severity, exposure, and business impact to support remediation prioritization.
Assist customers in developing practical remediation and patching strategies based on identified risks.
Participate in customer technical discussions, working sessions, assessment reporting, and findings presentations.

Required Qualifications

Typically 2+ years of experience in cloud security, vulnerability management, cybersecurity, cloud engineering, or a related technical role.
Educational background: Bachelor’s Degree (typically) or Master’s Degree.
Experience expectations aligned to education: typically 6+ years with a Bachelor’s Degree or 4+ years with a Master’s Degree.
Hands-on experience with at least one major cloud platform, preferably AWS, Azure, or Microsoft 365.
Foundational understanding of cloud security concepts, including identity and access, configuration security, resource exposure, logging, and security posture management.
Exposure to security or compliance standards such as CIS Benchmarks, NIST, SOC 2, or PCI DSS.
Ability to investigate technical security findings and communicate the issue, potential risk, and recommended remediation.
Interest in learning new cloud platforms, security tools, and automation technologies through hands-on work.

Technologies and Tools

AWS, Azure, Microsoft 365
CIS Benchmarks, NIST, SOC 2, PCI DSS
Qualys, Tenable
Entra ID, Defender, Exchange, Teams, SharePoint, Intune
GitHub Copilot, Microsoft Copilot Studio, Power Automate, Claude

Preferred Qualifications

Experience with cloud-native security services or cloud security posture management tools.
Experience with vulnerability scanning platforms, particularly Qualys or Tenable.
Microsoft 365 security exposure, including Entra ID, Defender, Exchange, Teams, SharePoint, or Intune.
Experience supporting cloud security assessments, vulnerability scans, remediation efforts, or patching programs.
Familiarity with AI-assisted development and automation tools such as GitHub Copilot, Microsoft Copilot Studio, Power Automate, or Claude.
AWS, Azure, or other relevant cloud or cybersecurity certification.

Compensation and Location

Location: Oregon (onsite).

Base salary: USD 80,510 - 124,280 per year.

The starting salary depends on primary work location. Location-based pay ranges include:

$80,510 - $107,340 in AR, ID, KY, LA, ME, MS, NE, SC, and SD.
$84,740 - $112,980 in AZ, AL, FL, GA, IN, IA, KS, MO, MT, NM, ND, OH, OK, PA, TN, UT, VT, WV, WI, and WY.
$88,980 - $118,630 in CO, HI, MI, MN, NV, NH, NC, OR, and RI.
$93,210 - $124,280 in AK, CA, CT, DE, DC, IL, MD, MA, NJ, NY, TX, VA, and WA.

Offers are determined by factors such as experience, education, skills, certifications, and other business needs.

Background Screening

If selected, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening depending on position requirements.
Job-related concerns identified during screening may disqualify the applicant from the new position or current role.
Background results are evaluated on a case-by-case basis.
Pursuant to the San Francisco Fair Chance Ordinance, qualified applicants with arrest and conviction records will be considered.

Cloud Security Engineer