What are the responsibilities and job description for the Senior Cloud Security Engineer position at OP Consulting Group LLC?
Senior Cloud Security Engineer
Mechanicsville,Virginia
Hybrid
Key Responsibilities
Design Secure Systems: Assist in designing secure cloud architectures for complex enterprise environments, reviewing proposed cloud solutions for security risks, and defining appropriate security and compensating controls.
Prevent Insecure Deployments: Influence architecture and security decisions to prevent insecure configurations from reaching production by implementing security gates within CI/CD deployment pipelines.
Policy & Automation: Develop Azure policies to enforce standardization and compliance with enterprise requirements, and create Azure Automation runbooks to support incident response workflows.
Network Security: Review and approve firewall and Network Security Group (NSG) rule requests to ensure strict compliance with organizational security standards.
Identify & Remediate Vulnerabilities: Identify cloud security vulnerabilities and assess risks based on business impact; prioritize, track, and validate corrective actions through to resolution.
Gap Analysis: Assess cloud security risks and operational gaps, recommending appropriate remediations to strengthen the security posture.
SIEM Monitoring & Investigation: Monitor security events using SIEM technologies, analyze system logs, and diagnose threats using diagnostic tools and line monitors. Lead the investigation, containment, and mitigation of cloud security incidents.
SOC Collaboration: Coordinate closely with the Security Operations Center (SOC) team to align incident response activities and share threat intelligence.
Technical Leadership: Lead complex cloud security initiatives, provide technical direction to engineers, and operate independently on assigned high-priority projects.
Non-Technical Communication: Translate and explain complex security risks and technical concepts clearly to non-technical stakeholders and business leaders.
Documentation & Audits: Create and maintain comprehensive security documentation, architecture topology diagrams, IP schemes, access controls, and audit evidence to fully support internal and external assessments.