Note: The job is a remote job and is open to candidates in USA. ApTask is a leading global provider of workforce solutions and talent acquisition services, dedicated to shaping the future of work. They are seeking a Cloud Security Engineer to establish a cloud security program across a multi-cloud environment, focusing on building inventories, assessing security postures, and integrating workflows into ServiceNow.
Responsibilities
- Enumerate cloud accounts, subscriptions, and projects (AWS, Azure, GCP, OCI) and Client material SaaS applications; reconcile into a ServiceNow CMDB cloud asset class
- Run cloud posture assessments; document misconfigurations and IAM, exposure, logging, and encryption gaps; risk-rank and map findings to owners; surface them in a ServiceNow posture dashboard
- Build the cloud account onboarding and monitoring workflow in ServiceNow (M&A fast-track)
- Onboard cloud telemetry into CrowdStrike, Obsidian, and Varonis DSPM; configure log forwarding (Cribl) into NG-SIEM; tune detections; route alerts into SecOps
- Author operational runbooks and operate the program in steady state; provide weekly status
- Apply frontier AI models (ChatGPT Enterprise, Claude) to accelerate inventory analysis, posture assessment, runbook drafting, and workflow design
Skills
- Hands-on multi-cloud security experience (AWS, Azure, and GCP at minimum; OCI a plus)
- Cloud security posture management (CSPM) concepts and tooling; assessment of IAM, network exposure, logging/telemetry, and encryption/key management
- ServiceNow build experience - workflows and CMDB integration. Non-negotiable; this is the engagement's core (capital) deliverable
- SIEM / log-pipeline integration (NG-SIEM, cloud log forwarding)
- Proficiency with AI frontier models (e.g., ChatGPT Enterprise, Claude) applied to security-engineering work, with an understanding of secure, governed AI use in an enterprise setting
- Strong documentation skills and the operational discipline to run steady-state operations
- Relevant cloud/security certifications are preferred but not required where hands-on experience is strong - for example, AWS / Azure / GCP security specialties, CCSP, CISSP, or GIAC cloud certifications
- Direct experience with CrowdStrike (Falcon Cloud Security / NG-SIEM), Obsidian SSPM, Zscaler, Varonis DSPM, Cribl, and Okta
- Insurance, financial-services, or other regulated-industry experience (GLBA, NY Client 500)
- Infrastructure-as-code familiarity (e.g., Terraform)
Benefits
- Fully remote work model
- Collaborative, fast-paced IT Security engineering team operating in a SAFe Agile model
- Use of AI frontier models (ChatGPT Enterprise, Claude) actively across security workflows
Company Overview
Company H1B Sponsorship