Senior Cloud Security Engineer

Peraton

. Lead proactive, hypothesis-driven threat hunting across AWS, Azure, GCP, and OCI environments .

Posted 11/4/2026full-timeRemote • United StatesSenior💰 $135,000 - $216,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security engineering across AWS, Azure, GCP, and OCI environments, with a strong focus on threat hunting, vulnerability remediation, and incident response. Proficient in using tools like Qualys and Tenable, along with a solid understanding of cloud IAM and security frameworks such as MITRE ATT&CK.

Highest-signal resume keywords

Cloud Security EngineeringThreat Hunting Using MITRE ATT&CKQualys And Tenable ExpertiseVulnerability RemediationSIEM Log Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWSAzureGCPOCIQualysTenablePythonPowerShellBashTerraform

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationAnalytical SkillsAttention To DetailInvestigative Mindset

Tools & Technologies

SIEMSplunkMicrosoft SentinelElasticCloud-native Services

Certifications & Qualifications

CISSPCCSPGCIHGCTIGCFAAWS Certified Security - SpecialtyMicrosoft AZ-500Google Professional Cloud Security Engineer

Industry Keywords

Threat IntelligenceVulnerability ManagementIAMNetwork SecuritySTIGsCIS BenchmarksNIST 800-53

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudGoogle Cloud PlatformLinuxPythonSplunkTerraform

About the role

Key responsibilities & impact

Lead proactive, hypothesis-driven threat hunting across AWS, Azure, GCP, and OCI environments
Use threat intelligence and the MITRE ATT&CK framework to identify adversary activity missed by automated tools
Analyze cloud-native telemetry and SIEM data to investigate suspicious activity
Administer and optimize Qualys and Tenable scanning across 70+ cloud customer tenants
Manage scan policies, agent and connector deployment, asset coverage, and credentialed scanning
Analyze vulnerability and configuration findings, eliminate false positives, and prioritize remediation
Lead remediation by coordinating with engineering and patching teams to patch, harden, or apply compensating controls
Verify remediation closure through rescanning
Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations
Develop and tune detection rules, queries, and automated hunt playbooks
Support incident response with scoping, containment recommendations, and root cause analysis
Produce hunt reports, remediation tracking, and POA&M inputs
Brief findings and risk to customers, ISSOs/ISSMs, and leadership
Mentor junior security engineers

Requirements

What you’ll need

Bachelors degree and 12 years of experience, or a Masters degree and 10 years of experience, or an Associates degree and 14 years of experience, or a High School diploma/equivalent and 16 years of experience
Must be a U.S. Citizen
Ability to obtain/maintain a DHS Public Trust
8+ years of experience in information security, including 5+ years in cloud security engineering
Hands-on security experience in at least three of AWS, Azure, GCP, and OCI
Expertise with Qualys (VMDR, Cloud Agent, Policy Compliance) and Tenable (Tenable.io, Tenable.sc, Nessus)
Experience conducting threat hunts and investigations using the MITRE ATT&CK framework
Proficiency writing queries and analyzing logs in a SIEM or log platform such as Splunk, Microsoft Sentinel, or Elastic
Experience remediating vulnerabilities and misconfigurations on Windows and Linux systems, containers, and cloud-native services
In-depth understanding of cloud IAM, network security, encryption, and logging architecture
Scripting or automation experience in Python, PowerShell, or Bash
Familiarity with Terraform or Ansible
Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls
Strong written and verbal communication skills
Investigative mindset, strong analytical skills, and attention to detail
Relevant certifications such as CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer are preferred

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee assistance program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company paid holidays
Potential eligibility for overtime
Potential eligibility for shift differential
Potential eligibility for a discretionary bonus