Note: The job is a remote job and is open to candidates in USA. ECS is seeking a Cloud Security Engineer to support its Homeland Security Solutions department from its Arlington, Virginia office or remotely. The role focuses on end-to-end vulnerability management, cloud security tooling across AWS, Azure, and GCP, architecture reviews, remediation, ATO support, continuous monitoring, reporting, and security automation.
Responsibilities
- Own vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environments
- Conduct authenticated and unauthenticated scans of web applications, APIs, servers, databases, and network devices
- Perform risk-based analysis of findings including false positive validation, asset context evaluation, and remediation verification
- Partner with platform, cloud, and application teams to drive sustainable remediation outcomes
- Implement, operate, and tune CSPM tools, vulnerability scanners, and application security tooling across AWS, Azure, and GCP
- Perform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controls
- Support static, dynamic, container, and dependency scanning and help dev teams understand and fix what’s found
- Perform secure configuration reviews against DISA STIGs and other security baselines
- Automate vulnerability validation, remediation tracking, and control validation using Python, Bash, PowerShell, and Terraform
- Manage certificate lifecycle including inventory, renewal tracking, and deployment coordination
- Support ATO activities, POA&M management, and RMF Step 6 continuous monitoring
- Build and maintain runbooks, technical reports, executive dashboards, and risk summaries
- Assist during security audits and incident response investigations involving vulnerable systems
- Protype and provide training on new tools and solutions
Skills
- * **Must have US citizenship.**
- * **Ability to pass a Public Trust investigation.**
- * **Bachelor's degree in a related field.**
- 7 years of overall IT experience, with at least 3 years focused specifically on cloud security or vulnerability management
- CISSP, CISA, CISM, or relevant cloud provider certifications required
- Hands-on scripting experience in Python, Bash, or PowerShell
- Familiarity with compliance frameworks including SOC 2, CIS, NIST, or ISO 27001
- Understanding of CVEs, CWEs, CVSS scoring, and how to apply them in practice
- Experience generating AI GPT prompts the produce the expected output
Benefits
- Remote work opportunity
Company Overview