Information Security Solutions Engineer II

Holman

. Review and design security architecture for Azure and AWS cloud environments .

Posted 10/13/2026full-timeRemote • New Jersey • United StatesMid-LevelSenior💰 $105,050 - $149,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security architecture for Microsoft Azure and Amazon AWS, with a strong focus on infrastructure as code using Terraform, ARM, and Bicep. Proficient in threat modeling, vulnerability remediation, and integrating security controls into CI/CD pipelines.

Highest-signal resume keywords

Cloud Security ArchitectureInfrastructure As CodeThreat ModelingApplication Security TestingSecurity Compliance Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft AzureAmazon AWSTerraformBicepPythonPowerShellOWASP Top 10IAMAPI SecurityVulnerability Remediation

Soft Skills

CollaborationCommunicationLeadership

Tools & Technologies

Burp SuiteOWASP ZAPCloudflareAkamaiFastlyImperva

Certifications & Qualifications

CISSPGIACOSCPAWS Security SpecialtyAzure Security Engineer (AZ-500)

Industry Keywords

NIST CSFCIS ControlsISO 27001MITRE ATT&CKAI Security

Tech Stack

Tools & technologies

AWSAzureCloudJavaScriptKubernetesNode.jsPythonRubyTerraform.NET

About the role

Key responsibilities & impact

Review and design security architecture for Azure and AWS cloud environments
Translate business requirements into practical security controls
Provide security architecture guidance and design patterns to Infrastructure, Cloud, and Development teams
Build, deploy, and maintain security infrastructure as code using Terraform, Terragrunt, ARM, and Bicep
Perform third-party vendor security reviews and recommend mitigations or acceptance criteria
Contribute to security architecture and operation of enterprise AI platforms, including MCP gateways, LLM routers, and AI gateways
Maintain documentation of security controls, configurations, architecture decisions, and procedures
Perform threat modeling with development teams and support vulnerability remediation through verified closure
Support IAM for cloud and application identities, least-privilege roles, secrets handling, and authentication/authorization patterns
Administer and maintain application and cloud security tooling
Integrate security controls and testing into CI/CD pipelines and developer workflows
Support third-party penetration testing, attack surface assessment, results triage, and remediation tracking
Report vulnerability exposure, remediation status, and risk to application owners and management
Participate in incident response, investigation, containment, and remediation
Lead delegated initiatives or workstreams
Share secure design and coding practices with peers and developers
Monitor emerging threats and recommend improvements to Holman's security posture
Perform other duties and special projects as assigned

Requirements

What you’ll need

5–7 years of combined information security and technical engineering experience, with significant time in cloud security, application security, or both
Strong experience securing Microsoft Azure and Amazon AWS environments in cloud-native and hybrid architectures
Hands-on experience writing and maintaining infrastructure as code with Terraform, ARM, and/or Bicep
Ability to read and reason about application code in at least one of .NET, Python, Ruby, or Node.js
Strong working knowledge of OWASP Top 10, OWASP API Security Top 10, threat modeling methodologies such as STRIDE, and secure software development practices
Working knowledge of Entra ID, AWS IAM, managed identities, service principals, RBAC, least privilege, OAuth 2.0, and OpenID Connect
Experience operating CNAPP/CSPM, application security testing, and API security platforms
Experience with Burp Suite or OWASP ZAP
Experience performing third-party vendor security assessments
Familiarity with Cloudflare, Akamai, Fastly, or Imperva
Working knowledge of Microsoft Windows and Microsoft 365, including Entra ID and Intune
Familiarity with MITRE ATT&CK, NIST CSF, NIST 800-53, CIS Controls, and ISO 27001/27002
Strong scripting ability in Python or PowerShell
Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent work experience
Preferred: defensive security, AI security, cloud FinOps and observability, container/Kubernetes security, penetration testing, compliance frameworks, and certifications such as CISSP, GIAC, OSCP, AWS Security Specialty, or Azure Security Engineer (AZ-500)

Benefits

Comp & perks

Health Insurance
Vision Insurance
Dental Insurance
Life and Disability Insurance
Flexible Spending and Health Savings Accounts
Employee Assistance Program
401(k) plan with Company Match
Paid Time Off (PTO)
Paid Holidays, Bereavement, and Jury Duty
Paid Pregnancy/Parental leave
Paid Military Leave
Tuition Reimbursement
Competitive wages commensurate with job-related skills, experience, relevant education or training, and geographic location