Note: The job is a remote job and is open to candidates in USA. Acuity is seeking a Cloud Security Engineer to help secure its cloud applications and solutions within Microsoft Azure. The role partners with engineering teams to assess cloud architectures, monitor threats, analyze vulnerabilities, and reduce risk across infrastructure, workloads, and application pipelines.
Responsibilities
- Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
- Collaborate with engineering squads on integrating automated security checks and risk-based deployment gates into CI/CD pipelines to identify and address security risks before deployment
- Drive adoption of: - Application security testing: Static application security testing (SAST) for source code, Dynamic application security testing (DAST) against running applications in authorized test environments, and Software composition analysis (SCA) for open-source dependencies and known vulnerabilities. - Container image scanning for known vulnerabilities and image configuration issues, and infrastructure-as-code (IaC) scanning for insecure resource configurations before deployment. - Policy-as-code guardrails that evaluate infrastructure configurations and deployment requests against defined security requirements, with risk-based enforcement and approved exception handling
Skills
- Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework etc
- Ability to drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including: - CSPM (Cloud Security Policies & Posture management) - CWPP (Runtime protection for VMs, Containers, Serverless applications) - CIEM (Identity entitlement and Least privilege Enforcement) - Kubernetes and container security (AKS, image hardening, runtime controls)
- Experience assessing identity and access architectures using Microsoft Entra ID and other identity providers, such as Okta, and guiding engineering teams on secure authentication, federation, single sign-on (SSO), and least-privilege access for users and workloads, including Microsoft Entra service principals and Azure managed identities
- Experience with reviewing the architecture and security controls for: - AKS/Kubernetes environments - Infrastructure-as-Code (Terraform, ARM, Bicep) - Service-to-service and API communication patterns
- Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved
- Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions
- Basic familiarity with cloud security standards, reference architecture patterns, and reusable security controls; exposure to contributing to their development or maintenance is a plus
- Exposure to supporting cloud security posture improvements and helping development teams strengthen their security practices
- Foundational understanding of secure-by-design and Zero Trust principles; exposure to communicating related security recommendations across teams is a plus
- Azure Security Certifications are a plus
Benefits
- This position may be based anywhere in the United States
Company Overview
Company H1B Sponsorship