云安全工程师(AWS & GCP)
Cloud Security Engineer (AWS & GCP)
职位描述
Quantum Sky 正在招聘一名云安全工程师(AWS 与 GCP),加入我们由云、安全和合规专家组成的团队。该职位主要负责日常安全工程工作,包括系统加固、漏洞修复、云运维以及 AWS 和 GCP 环境中的安全工具管理。
除了常规工作时间的职责外,工程师还需参与结构化的非工作时间 24×7 值班轮换(主班或备班),以支持对使用 FedRAMP、FISMA 和 NIST 800-53 框架的客户进行事件响应、警报处理和升级支持。
职责:
- 执行系统管理和维护工作,包括补丁管理、漏洞扫描、合规扫描及修复、备份和恢复,针对云工作负载。
- 支持 AWS 和 GCP 环境,包括 Windows 和 Linux 虚拟机、容器工作负载以及云服务如 EC2、EBS、S3、RDS、WorkSpaces(AWS)、Compute Engine、Cloud Storage、Cloud SQL(GCP)以及 Active Directory 或等效身份服务。
- 配置、更新和维护用于终端保护、日志收集、漏洞扫描和合规监控的安全工具。
- 通过查看日志、收集数据和分析系统行为,排查网络、计算、应用和身份层的问题。
- 使用 CIS 基准、DISA STIGs 和 FedRAMP 要求实施加固和合规控制。
- 修复由 Tenable、Trivy、OpenSCAP、Anchore、Twistlock 等工具识别出的漏洞。
- 在系统部署过程中提供质量保障反馈,确保架构符合合规和运营要求。
- 与安全分析师协作,确保向客户提供不间断的安全服务。
- 创建和维护文档,包括网络拓扑图、数据流图、标准操作流程(SOP)和安全工具配置指南。
- 通过良好的口头和书面沟通能力,支持客户沟通、交付成果和问题解决。
- 在需要时为初级工程师提供支持和指导。
- 非工作时间 24×7 值班轮换:
- 在分配的值班周期中担任主班或备班工程师。
- 处理非工作时间的安全警报、基础设施事件、中断和 ConMon 事件。
- 使用既定的运行手册进行初步排查、遏制和稳定化处理。
- 调查并响应生成的警报。
- 升级处理复杂问题。
查看英文原文
Description
Quantum Sky is hiring a Cloud Security Engineer (AWS & GCP) to join our team of cloud, security, and compliance experts. This role is primarily focused on day‑to‑day security engineering, including system hardening, vulnerability remediation, cloud operations, and security tool management across AWS & GCP environments.
In addition to regular business‑hours responsibilities, engineers participate in a structured after‑hours 24×7 on‑call rotation (primary or backup) to support response to incidents, alerts, and escalations for customers operating under FedRAMP, FISMA, and NIST 800‑53 frameworks.
Responsibilities:
- Perform systems administration and maintenance including patching, vulnerability scanning, compliance scanning and remediation, backups, and recovery for cloud workloads.
- Support AWS & GCP environments, including Windows and Linux virtual machines, container workloads, and cloud services such as EC2, EBS, S3, RDS, WorkSpaces (AWS), Compute Engine, Cloud Storage, Cloud SQL (GCP), and Active Directory or equivalent identity services.
- Configure, update, and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
- Troubleshoot issues across network, compute, application, and identity layers by reviewing logs, collecting data, and analyzing system behavior.
- Implement hardening and compliance controls using CIS Benchmarks, DISA STIGs, and FedRAMP requirements.
- Remediate vulnerabilities identified by tools such as Tenable, Trivy, OpenSCAP, Anchore, Twistlock, and others.
- Provide quality assurance feedback during system deployments to ensure architecture meets compliance and operational requirements.
- Collaborate with Security Analysts to ensure uninterrupted delivery of security services to customers.
- Create and maintain documentation including network diagrams, dataflow diagrams, SOPs, and security tool configuration guides.
- Support client communications, deliverables, and issue resolution with strong verbal and written communication skills.
- Support and mentor junior engineers as and when required.
- After‑Hours 24×7 On‑Call Rotation:
- Serve as primary or backup on‑call engineer during assigned rotation.
- Respond to after‑hours security alerts, infrastructure incidents, outages, and ConMon events.
- Perform initial triage, containment, and stabilization using established runbooks.
- Investigate and respond to alerts generated.
- Escalate complex issues to senior engineers, architects, or compliance teams.
- Document incidents, actions taken, and recommended improvements.
- Contribute to automation improvements and runbook enhancements.
Qualifications
Required:
- Six (6) or more years of IT engineering and/or cybersecurity experience, with at least three (3) years working in a dedicated cloud security engineering or similar position.
- Hands‑on experience with both AWS and Google Cloud Platform (GCP).
- Ability to diagnose and resolve issues across Linux and Windows systems, network infrastructure, and cloud services.
- General systems administration and vulnerability management experience, including system patching and hardening, identity and access management (IAM), and related tasks.
- Experience working in a DevSecOps environment, integrating security practices into cloud and infrastructure workflows.
- Familiarity with ITSM ticketing systems such as Gitlab (preferred), Jira, ServiceNow, etc.
- Ability to work independently during both business hours and on‑call periods.
- Strong written and verbal communication skills for customer interaction and incident documentation.
- Hands‑on experience with one or more of the following tools:
- Splunk Enterprise
- Tenable Security Center/Nessus
- Invicti/Acunetix
- Appgate
- Okta
- GitLab
- Palo Alto Networks Firewalls
- TrendMicro Deep Security
- Trivy
- Anchore
- Terraform
- CloudFormation
- Ansible
Desired:
- Bachelor's Degree in Computer Science or other relevant field.
- Experience supporting federal/government-facing customers or consulting engagements, ensuring compliance and operational requirements.
- Experience with FedRAMP, FISMA, or NIST 800‑53 compliance frameworks.
- Prior on‑call, SRE, SOC, or incident response experience.
- Relevant AWS or Google Cloud Platform certifications.
- Security+ or other relevant industry security certification.
- Experience with infrastructure‑as‑code or automation tooling.
- Experience with Kubernetes is highly desirable.
Location:
· Remote (US)
Clearance:
· Must be a US Citizen with the ability to obtain a security clearance
About Quantum Sky
Compensation:
· Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $115,000-$140,000 This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.
Benefits:
· Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.
The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.
At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?
Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.
Originally posted on Himalayas