Sr. Cloud Security Engineer

Location: Pleasanton, CA, us

Company Description

Sr. Cloud Security Engineer

Position Overview

Company Description

Talent Connection partners with top enterprise organizations and we are seeking a highly experienced Cloud Security Engineer to lead the design, implementation, and continuous improvement of security controls across modern cloud environments. This role is responsible for securing cloud infrastructure, workloads, applications, and data while driving automation, governance, and security best practices across the organization.

The ideal candidate has extensive experience building cloud-native security solutions, developing scalable security architectures, and partnering with cross-functional teams to reduce risk without limiting business agility. This individual will also serve as a technical leader, evaluating emerging technologies and helping shape the organization's long-term cloud security strategy.

Job Description

Key Responsibilities

• Design, implement, and maintain cloud security architectures across public and hybrid cloud environments.
• Develop and manage security controls that protect cloud infrastructure, applications, containers, and enterprise data.
• Lead implementation of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Data Security Posture Management (DSPM), SaaS Security Posture Management (SSPM), and related cloud security technologies.
• Develop security automation and remediation workflows to improve operational efficiency and reduce response times.
• Partner with Governance, Risk, and Compliance (GRC), Infrastructure, DevOps, and Engineering teams to ensure cloud solutions meet organizational security standards.
• Evaluate emerging cloud security technologies and recommend improvements that strengthen the organization's overall security posture.
• Define cloud security architecture standards, technical documentation, implementation guides, and operational procedures.
• Build and maintain security monitoring, logging, and alerting capabilities across cloud platforms.
• Implement Zero Trust security principles, identity protection, secure access controls, and least-privilege models.
• Secure containerized workloads, Kubernetes environments, APIs, and cloud-native applications.
• Collaborate with engineering teams to integrate security into cloud deployments and CI/CD pipelines.
• Participate in architecture reviews, threat modeling, and security assessments for new cloud initiatives.
• Develop automation scripts and infrastructure-as-code solutions that improve security operations and compliance.
• Stay current on emerging cloud threats, attack techniques, and evolving security technologies.

Qualifications

Required Qualifications

• 10+ years of Information Security experience, including significant experience supporting enterprise-scale cloud environments.
• 5+ years designing and implementing cloud security solutions in AWS, Azure, or Google Cloud Platform.
• Strong understanding of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), DSPM, SSPM, and cloud-native security services.
• Experience securing container platforms such as Kubernetes and Docker.
• Knowledge of Zero Trust Architecture, Identity and Access Management (IAM), privileged access, and secure authentication technologies.
• Experience implementing cloud logging, monitoring, SIEM integrations, and threat detection solutions.
• Experience with Infrastructure as Code (Terraform, CloudFormation, or similar) and security automation.
• Ability to design enterprise cloud security architectures aligned with industry frameworks and compliance requirements.
• Strong scripting or automation experience using PowerShell, Python, Bash, or similar languages.
• Excellent communication skills with the ability to collaborate across technical and business teams.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related discipline preferred. Relevant cloud and security certifications are highly desirable.

Additional Information

Preferred Technical Skills

• AWS, Microsoft Azure, or Google Cloud Platform
• Cloud Security Posture Management (CSPM)
• Cloud Workload Protection Platforms (CWPP)
• Data Security Posture Management (DSPM)
• SaaS Security Posture Management (SSPM)
• Kubernetes & Container Security
• Zero Trust Architecture
• Identity & Access Management (IAM)
• Microsoft Entra ID / Okta
• SIEM & Cloud Logging
• Security Automation & Orchestration
• Infrastructure as Code (Terraform, CloudFormation)
• CI/CD Security
• Threat Detection & Incident Response
• Cloud Compliance & Security Frameworks

Core Competencies

• Strategic problem-solving and analytical thinking
• Strong technical leadership and collaboration skills
• Ability to influence cross-functional teams and drive security initiatives
• Excellent written and verbal communication
• Adaptability in fast-changing cloud environments
• Strong planning, prioritization, and execution skills
• Continuous learning and commitment to cybersecurity best practices

Cloud Security (AWS, Azure, GCP, CSPM, CWPP, DSPM, SSPM)

Identity & Zero Trust (IAM, Entra ID, Okta, SSO, MFA, PAM)

Cloud Security Automation (Terraform, Python, PowerShell, CI/CD Security, Security Orchestration)