Cloud Security Engineer

Title : Cloud Security Engineer

Location : Herndon, VA

• Clearance :
• Active TS / SCI w / Polygraph needed to apply

Company Overview :

Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees, we continually focus our attention on improving the overall work / life experience they have supporting the mission. Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation's toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don't look any further than Cornerstone Defense.

Benefits Overview :

Cornerstone Defense offers a very comprehensive benefits package including, but not limited to : Medical, Dental and Vision Plans

• Generous PTO Policy
• 401(k)
• HSA and FSA options
• Life and Disability Insurance
• Tuition Reimbursement and Training
• Perks at Work Discount Program
• Referral Program
• Leads Generation Program
• CollegeAmerica 529
• Fitness Reimbursement Program
• Travel Assistance
• Norton Lifelock Benefit Solutions
• Life Planning Financial & Legal Services

Seeking a motivated, career and customer-oriented Cloud Security Engineer to join our team in Herndon, VA. Join a team of cybersecurity experts that protects and defends the largest target in the world. As a Cloud Security Engineer on our team, you will utilize the latest tools available and assist in creating new ones while allowing you to advance the nation's information security posture. Responsibilities include but are not limited to :

• Design and champion the strategy for detecting and responding to cyber incidents within Oracle Cloud Infrastructure (OCI) or Google Cloud Platform (GCP)
• Create advanced detection rules and tradecraft to uncover sophisticated cloud-based attacks
• Optimize data pipelines to fuel rapid incident analysis and proactive threat hunting in the cloud
• Serve as the Subject Matter Expert (SME) during critical cloud security incidents, guiding the CSOC team to swift resolution
• Continuously evaluate emerging cloud security tools and techniques to enhance our defenses and response capabilities
• Partner with cross-functional teams and mentor less experienced analysts to build a stronger cloud security posture across the organization

Minimum Qualifications :

• High School Diploma and 15+ years of experience in cloud or cyber security or Bachelor's degree and 11+ years of experience
• 5+ years of experience in cyber incident response
• 3+ years' experience architecting, engineering, implementing, or securing solutions within Google Cloud Platform (GCP) OR Oracle Cloud Infrastructure (OCI)
• 2+ years' experience with data ingestion, processing, and analysis of data relevant to security investigations, such as log management, basic ETL concepts or similar.
• Experience with at least one scripting language, such as Python or Bash, for task automation or security analysis
• Experience with cloud security principles, including identity and access management, network security, and data protection within the chosen platform (GCP or OCI)

Preferred Qualifications :

• Degree in Computer Science, Information Security, or a related technical field Relevant Certifications such as CISSP, CCSP, CCSK, GCFA, GCIH, or cloud-specific security certifications (e.g., Google Cloud Security Engineer, Oracle Cloud Security Architect)
• Experience in security services and best practices within either Google Cloud Platform (GCP Security Command Center, Chronicle, IAM, Networking) OR Oracle Cloud Infrastructure (OCI Cloud Guard, Security Zones, IAM, Networking)
• Experience leading and coordinating complex cloud security incident investigations, including forensic analysis and containment strategies
• Ability to develop and implement automation scripts and workflows (e.g., Python, Cloud Functions / Lambdas, SOAR platforms) to enhance incident response efficiency
• Clearance Requirements : Must have a current / active TS / SCI w / Polygraph