Cloud Security Engineer

About the Role

Amoha Recruitment Services is seeking early-career Cloud Security Engineers for client engagements across various industries. This role is ideal for individuals with a strong foundation in cloud infrastructure, security monitoring, identity and access management, threat detection, vulnerability management, and cloud security best practices. The goal is to secure cloud environments, protect sensitive data, and implement security controls.

Key Responsibilities

• Assist in implementing and maintaining security controls across cloud environments.
• Monitor cloud infrastructure for security threats, suspicious activity, and potential vulnerabilities.
• Support Identity and Access Management (IAM), including user permissions, roles, policies, and access reviews.
• Help configure cloud security services, policies, and monitoring tools.
• Assist with vulnerability assessments, security scans, and remediation activities.
• Support security incident detection, investigation, documentation, and response.
• Implement security best practices for cloud storage, networking, compute resources, and databases.
• Help enforce least-privilege access, multi-factor authentication (MFA), and secure authentication practices.
• Monitor security logs and alerts using cloud-native tools and centralized logging platforms.
• Assist in implementing encryption for data at rest and in transit.
• Support network security configurations, including firewalls, security groups, network access controls, and private connectivity.
• Work with DevOps, infrastructure, and development teams to integrate security into CI/CD pipelines.
• Assist with Infrastructure as Code (IaC) security reviews using tools such as Terraform and CloudFormation.
• Help identify cloud misconfigurations and recommend corrective actions.
• Support compliance initiatives and security frameworks such as NIST, CIS Benchmarks, SOC 2, and ISO 27001.
• Maintain security documentation, incident reports, access records, and operational procedures.
• Participate in security reviews, risk assessments, and continuous improvement initiatives.

Requirements & Tech Stack

• Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, Software Engineering, Computer Engineering, or a closely related field.
• 0-3 years of professional, internship, academic, or hands-on experience in cloud security, cybersecurity, cloud infrastructure, IT security, or a related area.
• Basic understanding of cloud computing concepts and shared responsibility models.
• Familiarity with at least one cloud platform: AWS, Microsoft Azure, or Google Cloud Platform.
• Understanding of Identity and Access Management (IAM), role-based access control, and least-privilege principles.
• Basic knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls.
• Understanding of security fundamentals, including encryption, authentication, authorization, and vulnerability management.
• Familiarity with Linux/Unix or Windows operating systems.
• Basic understanding of security monitoring, logging, alerting, and incident response.
• Familiarity with scripting languages such as Python, Bash, PowerShell, or a similar language.
• Understanding of cloud storage security, network security, and secure configuration practices.
• Familiarity with Git, version control, and basic software development workflows.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Willingness to learn emerging cloud security technologies, tools, and industry best practices.

Skills That Strengthen Your Application

• AWS security services: IAM, GuardDuty, Security Hub, CloudTrail, and AWS Config
• Microsoft Azure security: Microsoft Defender for Cloud, Microsoft Entra ID, and Azure Policy
• Google Cloud security: IAM, Security Command Center, Cloud Audit Logs, and Organization Policy
• Identity and Access Management (IAM)
• Role-Based Access Control (RBAC) and least-privilege access
• Multi-Factor Authentication (MFA) and identity governance
• Cloud security posture management (CSPM)
• Security Information and Event Management (SIEM)
• Splunk, Microsoft Sentinel, or similar security monitoring platforms
• Vulnerability scanning and remediation
• Cloud network security, firewalls, VPNs, and security groups
• Data encryption, key management, and secrets management
• AWS KMS, Azure Key Vault, or Google Cloud Key Management Service
• Docker and Kubernetes security fundamentals
• Terraform, CloudFormation, or other Infrastructure as Code (IaC) tools
• DevSecOps and CI/CD pipeline security
• Python, Bash, or PowerShell scripting
• Linux/Unix administration and security hardening
• Security standards: NIST, CIS Benchmarks, SOC 2, and ISO 27001
• Threat detection, incident response, and security auditing
• Cloud compliance, risk assessment, and security documentation
• Certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, CompTIA Security+, or relevant entry-level cloud certifications.

Work Authorization

• US Citizens or Green Card holders
• On F-1 OPT or STEM-OPT
• Eligible for or currently holding H-1B status

Compensation & Benefits

• Market-competitive salary: $90,000–$130,000/year, depending on client, location, experience, and qualifications.
• Health and wellness benefits through placement, where offered by the client or employer.
• Paid Time Off (PTO), where applicable.
• Ongoing learning and professional development support.
• Exposure to real-world cloud security projects and enterprise technology environments.
• Opportunities to work with cloud-native security tools, monitoring platforms, and security automation technologies.
• Experience in cloud infrastructure protection, threat detection, access management, and vulnerability remediation.
• Opportunities to develop skills in DevSecOps, cloud compliance, and security engineering.