Cloud Security Engineer

Everforth ECS is seeking a Cloud Security Engineer to work in our Washington, DC office / remote.  The role is contingent upon additional funding.

We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division — a full-spectrum cybersecurity organization covering endpoint protection, event monitoring, threat intelligence, and advanced incident response. This is a hands-on engineering role, not an architecture or design position.

You will be in the environment every day, operating and improving the security controls that protect the organization's cloud and web-based assets while maintaining and hardening the Linux server infrastructure that supports them.

Your work spans two equally important disciplines. On the cloud and web side, you will plan, implement, and monitor security measures across enterprise cloud platforms, analyze cloud services and APIs for risk, and develop the detection and response procedures that keep those environments safe. On the Linux side, you will bring deep system-level expertise to ensure that server infrastructure is securely configured, actively monitored, and thoroughly documented.

This role is a strong fit for someone who is equally at home in a cloud console and a Linux terminal and who brings a security operations mindset to both.

Salary Range: $120,000 - $130,000

General Description of Benefits [https://ecstech.com/careers/benefits]

Qualifications

Cloud & Web Security

• Proven experience planning, implementing, and monitoring security measures for enterprise assets hosted on cloud platforms such as AWS, Azure, or GCP
• Ability to analyze cloud services, APIs, and log payloads to ensure they meet industry security standards and organizational requirements
• Experience developing and maintaining standard operating procedures for cloud-based security event handling
• Familiarity with cloud-native security tooling including Cloud Access Security Brokers (CASBs), Cloud Security Posture Management (CSPM), and cloud workload protection platforms
• Experience with cloud architectures including SaaS and PaaS, and common commercial platforms such as Google Workspace, Microsoft 365, and AWS
• Understanding of web application security concepts including OWASP vulnerabilities, API security, and web application firewall (WAF) management
• Experience with cloud IAM frameworks, role-based access control, and Zero Trust Architecture as applied to cloud environments
• Ability to create custom detection mechanisms that correlate log sources across cloud environments to surface potential intrusions

Linux Server

• Strong hands-on experience administering and hardening Linux server environments in an enterprise setting
• Proficiency with Linux security tooling, system logging frameworks, and monitoring utilities
• Experience reviewing system and application logs, identifying anomalies, and taking appropriate corrective action
• Ability to create and maintain thorough documentation for Linux-based systems, including installation, configuration, and troubleshooting procedures
• Experience supporting security continuous monitoring efforts including vulnerability management, system patching, and risk assessments within Linux environments
• Working knowledge of network protocols, firewall management, and secure server configuration in Linux-based infrastructure

Security Operations & Collaboration

• Ability to identify capability gaps and recommend improvements at both the technical and process level
• Experience contributing to the development of detection standards, security procedures, and operational documentation
• Ability to collaborate across teams including cybersecurity, networking, systems administration, and technology support partners
• Comfortable communicating technical findings and risk clearly to both technical peers and senior leadership

A minimum of 5+ years of experience in information technology or cybersecurity is required, with at least 3+ years of direct, hands-on experience implementing or supporting cloud-based security. Candidates with demonstrated experience across both cloud security operations and Linux server administration in an enterprise environment will be strongly preferred.