Cyber Security Engineer, Cloud Security

TherapyNotes, LLC

. Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure .

Posted 11/3/2026full-timeRemote • Pennsylvania • United StatesMid-LevelSenior💰 $110,000 - $130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing and securing cloud infrastructure, particularly in Azure, while implementing cloud security posture management and securing containerized workloads. Proficient in incident response, vulnerability management, and compliance with security frameworks.

Highest-signal resume keywords

Cloud Security EngineeringAzure Infrastructure SecurityKubernetes SecurityCloud Security Posture Management (CSPM)Incident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security EngineeringAzureKubernetesTerraformOpenTofuMicrosoft Entra IDZero Trust SecurityVulnerability ManagementNetwork SecuritySecurity Assessments

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

SIEMDLPE/XDRGitOpsCloudflare Zero Trust

Certifications & Qualifications

CISSPSSCPSecurity+Cloud Security Certification

Industry Keywords

NISTISO 27001CISHITRUSTPCI DSS

Tech Stack

Tools & technologies

AWSAzureCloudFluxKubernetesLinuxSDLCTerraform

About the role

Key responsibilities & impact

Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure
Secure containerized workloads and Kubernetes environments, including network policy, workload identity, runtime protection, and container image scanning
Own and mature cloud security posture management (CSPM), continuously identifying and remediating misconfigurations across cloud environments
Secure infrastructure-as-code orchestration platforms, including access control, secrets management, and deployment approval workflows for Terraform/OpenTofu pipelines
Manage and secure identities in Microsoft Entra ID through Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models
Review network diagrams and proposed connectivity changes, provide security input on segmentation and sensitive data flows, and work with IT and SRE teams to address concerns
Administer Zero Trust network access and edge security tooling to secure access to corporate and cloud resources
Manage broader security solutions, including SIEM, DLP, E/XDR, and vulnerability management
Monitor security alerts, respond to and escalate incidents, and participate in the incident response on-call rotation
Conduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership
Develop queries, scripts, integrations, and automated workflows to improve cloud security operations
Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline
Conduct periodic cloud configuration and access reviews to ensure compliance with security standards
Participate in audits and assessments, supporting governance, risk management, and compliance (GRC) efforts

Requirements

What you’ll need

Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered
5+ years of experience in cloud security engineering or related role
Deep, hands-on experience securing cloud infrastructure and cloud-based applications (Azure preferred, AWS a plus)
Hands-on network security experience and a strong understanding of network architecture, connectivity, segmentation, and firewall controls
Experience securing containerized workloads and Kubernetes environments (e.g., AKS), including network policy, workload identity, and runtime protection
Experience with cloud security posture management (CSPM) and remediating misconfigurations across cloud environments
Experience securing IaC orchestration platforms, including access control, secrets management, and deployment approval workflows (e.g., Terraform, OpenTofu)
Experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models
Experience with Zero Trust / SASE tooling (e.g., Cloudflare Zero Trust, WAF, Gateway, or equivalent)
Knowledge of security frameworks (NIST, ISO 27001, CIS) and compliance frameworks (HITRUST, PCI DSS)
Proven ability to conduct security assessments, vulnerability management, and incident response
Strong understanding of OS platforms (Windows, Linux) and endpoint security
Industry certifications such as CISSP, SSCP, Security+, or a cloud security certification (Azure/AWS) preferred
Familiarity with GitOps tooling (Argo, Flux) for secure deployment in Kubernetes environments
Network or Systems Engineering background a huge plus
Familiarity with programming/scripting languages a plus

Benefits

Comp & perks

Employer sponsored health, dental, vision, life, and disability insurance
Retirement plan with company contribution
Annual company profit sharing
Personal development/training budget
Open, collaborative work environment
Extensive 2-week onboarding plan
Comprehensive mentorship program