Cloud Security Engnieer - Intermediate

Cloud Security Engineer Intermediate
Location: Remote
Education: Bachelor's Degree
Experience: 5+ years
Work Authorization: U.S. Citizen
Position Summary
We are seeking a Cloud Security Engineer Intermediate to provide hands-on cloud security support for a 24x7 FedRAMP High AWS GovCloud environment. The role will support vulnerability management and patching, hardened cloud images, CI/CD security, continuous monitoring and threat detection, backup and data protection, and cloud security compliance.
Key Responsibilities
Coordinate vulnerability management and patching activities across cloud environments within required federal SLA timelines.
Analyze Tenable Nessus scan results, map CVEs to NIST SP 800-53 Rev. 5 controls, and manage POA&M entries for open findings.
Execute Ansible-based AMI patching and perform regression scans to validate remediation.
Implement and maintain security scanning within GitLab CI and Jenkins pipelines, including SAST, SCA, DAST, container, IaC, and secrets scanning.
Maintain hardened baseline AMIs aligned with DISA STIG and CIS benchmarks.
Support security tools including Trivy, Grype, SonarQube, OpenSCAP, and Syft.
Monitor CISA KEV and other authorized threat intelligence sources.
Correlate Splunk SIEM and CrowdStrike Falcon EDR security events and support CloudWatch monitoring and alerting.
Respond to and escalate security events within required response timelines.
Support AWS Backup, cross-Region replication, backup testing, and recovery activities.
Support Data Loss Prevention (DLP) operations.
Support AWS IAM and least-privilege access controls.
Maintain Infrastructure-as-Code configurations using Terraform and Ansible.
Support AWS Control Tower and Service Control Policies.
Maintain audit logs and security documentation in accordance with NIST SP 800-53, FedRAMP, FISMA, and applicable policies.
Required Qualifications
Bachelor's degree.
5+ years of AWS cloud security engineering experience, including IAM, Security Hub, GuardDuty, AWS Config, CloudTrail, KMS/CloudHSM, Control Tower, and Service Control Policies.
FedRAMP High or AWS GovCloud experience.
5+ years of vulnerability management experience using Tenable Nessus or equivalent, including CVE triage, POA&M management, and remediation.
5+ years of experience securing CI/CD pipelines using SonarQube, Trivy, Grype, IaC scanning, secrets detection, and DAST in GitLab CI or Jenkins.
4+ years of experience with Terraform and Ansible, hardened AMIs, and DISA STIG or CIS benchmarks.
5+ years of experience with Splunk or equivalent SIEM, including log analysis, threat correlation, and alert tuning.
3+ years of experience with CrowdStrike Falcon or equivalent EDR.
5+ years of experience with NIST SP 800-53 Rev. 5 and FISMA/FedRAMP controls.
Proficiency with Microsoft Excel and Word.
Excellent verbal and written communication skills.
Preferred Qualifications
Experience securing containers and Kubernetes environments on AWS EKS, Red Hat OpenShift, or ROSA.
Experience with SBOMs using CycloneDX and Syft.
Experience with DLP solutions in federal cloud environments.
Experience with AWS Backup and immutable recovery capabilities.
Experience with AIOps security triage tools.
Experience producing OSCAL evidence and integrating with RegScale.
Experience implementing Zero Trust network controls.
Experience with federal cloud security processes, continuous monitoring, or similar environments.
About The Company
Headquartered in Leesburg, Virginia, Zenius Corporation is a HUBZone-certified small business. Zenius specializes in providing Grants Management, IT Modernization, Acquisition Management, and Financial Management services to Federal agencies. Zenius is selected by Inc 5000 as one of the fastest-growing companies in the DC Metro Area, awarded in 2025, 2024, 2021, and 2020. Zenius is also listed by Financial Times as one of the fastest-growing companies in the Americas in 2021. Zenius is an awardee of 2019 Best of Leesburg winner (Business Management Consultant category).
Benefits
Zenius Corporation is an employee-oriented company. Join us now and help us grow!
We offer a competitive benefits package that includes paid holidays and paid time off, medical insurance including health, vision, dental insurance, 401K matching, Flexible Spending Account and flexible schedules, as per business needs. We also work with our employees on training and professional certification plans that benefit the employee.
Equal Opportunity Employer
Zenius Corporation provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws. Zenius complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
Zenius Corporation expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.

Work arrangement
No