SK Cloud Security Engineer
Summary
Probity is hiring a Cloud Security Engineer in Herndon, VA (onsite; active TS/SCI with polygraph required) to design cloud threat detection and incident response for government customers — building detection rules, optimizing security data pipelines, and serving as SME for the CSOC in Oracle Cloud Infrastructure or Google Cloud Platform, using scripting like Python or Bash.
PLEASE NOTE: This position requires an ACTIVE Top Secret/SCI Clearance with Polygraph. To be considered for this position, you MUST have an ACTIVE Clearance Level of Top Secret/SCI with Polygraph
Position Code: 26-SC0619-1
Seeking a motivated, career and customer-oriented Cloud Security Engineer to join our team in Herndon, VA. Join a team of cybersecurity experts that protects and defends the largest
target in the world. As a Cloud Security Engineer on our team, you will utilize the latest tools available and assist in creating new ones while allowing you to advance the nation’s information security posture.
Responsibilities include but are not limited to:
- Design and champion the strategy for detecting and responding to cyber incidents within Oracle Cloud Infrastructure (OCI) or Google Cloud Platform (GCP)
- Create advanced detection rules and tradecraft to uncover sophisticated cloud-based attacks
- Optimize data pipelines to fuel rapid incident analysis and proactive threat hunting in the cloud
- Serve as the Subject Matter Expert (SME) during critical cloud security incidents, guiding the CSOC team to swift resolution
- Continuously evaluate emerging cloud security tools and techniques to enhance our defenses and response capabilities
- Partner with cross-functional teams and mentor less experienced analysts to build a stronger cloud security posture across the organization
Minimum Qualifications:
- High School Diploma and 15+ years of experience in cloud or cyber security or Bachelor’s degree and 11+ years of experience
- 5+ years of experience in cyber incident response
- 3+ years’ experience architecting, engineering, implementing, or securing solutions within Google Cloud Platform (GCP) OR Oracle Cloud Infrastructure (OCI)
- 2+ years’ experience with data ingestion, processing, and analysis of data relevant to security investigations, such as log management, basic ETL concepts or similar.
- Experience with at least one scripting language, such as Python or Bash, for task automation or security analysis
- Experience with cloud security principles, including identity and access management, network security, and data protection within the chosen platform (GCP or OCI)
Preferred Qualifications:
- Degree in Computer Science, Information Security, or a related technical field Relevant Certifications such as CISSP, CCSP, CCSK, GCFA, GCIH, or cloud-specific security certifications (e.g., Google Cloud Security Engineer, Oracle Cloud Security Architect)
- Experience in security services and best practices within either Google Cloud Platform (GCP Security Command Center, Chronicle, IAM, Networking) OR Oracle Cloud Infrastructure (OCI Cloud Guard, Security Zones, IAM, Networking)
- Experience leading and coordinating complex cloud security incident investigations, including forensic analysis and containment strategies
- Ability to develop and implement automation scripts and workflows (e.g., Python, Cloud Functions/Lambdas, SOAR platforms) to enhance incident response efficiency