Cybersecurity Engineer, Cloud

Amentum

. Implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services .

Posted 11/2/2026full-timeRemote • United StatesMid-LevelSenior💰 $130,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing and maintaining security controls across Microsoft 365, Azure, AWS, and hybrid services, with a strong focus on compliance with CMMC and NIST requirements. Proficient in cloud security posture management, technical risk assessments, and securing AI and machine-learning services.

Highest-signal resume keywords

Cloud Security Posture ManagementTechnical Risk AssessmentsMicrosoft 365 Security CapabilitiesCMMC ComplianceInfrastructure As Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityTechnical Controls ImplementationScriptingAutomationIdentity ManagementNetwork SecurityData ProtectionLoggingWorkload ProtectionGenerative AI Security

Soft Skills

TroubleshootingDocumentationCollaborationPriority Management

Tools & Technologies

Microsoft 365AzureAWSHybrid ServicesCloud-Native Application Protection PlatformsSecurity OperationsManaged Security Service Provider

Certifications & Qualifications

Security+Azure Security CertificationAWS Security CertificationCCSP

Industry Keywords

CMMCNIST SP 800-171NIST SP 800-172DFARSITARISO 27001Australia DISPUK Cyber Essentials PlusGDPRCUI

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services
Configure and test security policies, infrastructure-as-code controls, deployment automation, and integrations
Review technical findings, troubleshoot control failures, and recommend configuration changes to reduce risk
Administer assigned cloud security posture management and workload protection capabilities
Maintain platform health and configuration, tune controls, document exceptions, and identify cloud coverage gaps
Integrate cloud security telemetry with Security Operations and the managed security service provider
Support escalated investigations requiring cloud expertise
Coordinate exposure prioritization and tracking with Vulnerability Management and cloud platform owners
Implement and validate technical controls supporting CMMC and applicable NIST requirements
Support Microsoft 365 GCC High and CUI workloads
Translate DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, and other requirements into cloud configurations
Perform technical risk assessments and control testing; maintain implementation records, evidence, exceptions, and remediation status
Implement and operate security controls for approved AI and machine-learning services, copilots, generative AI applications, RAG, agents, and tool integrations
Configure identity, access, data-source permissions, secrets handling, execution boundaries, sandboxing, tool restrictions, approvals, network egress, and logging safeguards
Test controls against prompt injection, sensitive-data exposure, unsafe tool execution, over-privileged agents, and other AI security risks
Evaluate AI service configurations and platform features for security, privacy, data residency, government-cloud availability, and CUI handling
Automate AI security configurations and validation checks through policy, scripting, infrastructure as code, and deployment pipelines
Integrate AI activity and security telemetry with enterprise monitoring and support investigations
Collaborate with Identity, Network Security, Data Security, Detection and Incident Response, IT, program sites, and application teams
Maintain configuration standards, implementation guides, diagrams, operating procedures, and support documentation
Participate in second-level SOC activities and respond to critical incidents escalated by an MSSP
Provide infrequent off-hours support as needed
Perform other duties as assigned

Requirements

What you’ll need

U.S. citizenship is required for this position
Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience
Five years of related experience, including three or more years of relevant experience in cloud, security, systems, or infrastructure engineering
Hands-on experience with Microsoft cloud or AWS security capabilities
Ability to support Microsoft 365, Azure, AWS, and hybrid services as needed
Experience implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code
Working knowledge of cloud identity, network security, data protection, logging, posture management, and workload protection concepts
Working knowledge of generative AI and agentic-system security risks
Ability to support technical risk assessments, control testing, remediation documentation, and audit evidence collection
Ability to troubleshoot technical issues, document work clearly, manage priorities, and collaborate with technical and non-technical partners
Experience with a cloud security posture management, workload protection, or cloud-native application protection platform
Practical experience with Microsoft 365 GCC High or a comparable government cloud environment
Direct experience supporting government, defense-industrial-base, CUI, or other regulated cloud environments
Working knowledge of CMMC, NIST SP 800-171, and NIST SP 800-172 concepts
Familiarity with DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, or comparable requirements
Hands-on experience securing cloud AI or machine-learning services, enterprise copilots, generative AI applications, retrieval-augmented generation, agents, or automated tool integrations
A relevant security or cloud certification is preferred, such as Security+, an Azure or AWS security certification, CCSP, or comparable training

Benefits

Comp & perks

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance