Cyber Security Engineer (Cloud Security)
at Therapynotes
Philadelphia, Pennsylvania, United States, remote, mid, full time, USD 1,10,000–1,30,000 / year, 5+ years
posted 03 Nov 2026
- GitOps
- SASE
- Cloudflare Zero Trust
- DLP
- Windows
- HITRUST
- OpenTofu
- Terraform
- ISO 27001
- SIEM
- Conditional Access
- AWS
- PCI DSS
- Azure
- Microsoft Entra ID
- Argo
- Flux
- AKS
- CIS
- Linux
- Entitlement Management
- NIST
- Zero Trust
- WAF
- Kubernetes
- E/XDR
About the role
Remote: yes Posted: 2026-11-03
What you would do
- Manage and secure cloud infrastructure and cloud-based applications, with a focus on Azure.
- Secure containerized workloads and Kubernetes environments (e.g., AKS) — network policy, workload identity, runtime protection, and container image scanning.
- Own and mature cloud security posture management (CSPM) — continuously identify and remediate misconfigurations across cloud environments.
- Secure infrastructure-as-code orchestration platforms — access control, secrets management, and deployment approval workflows for Terraform/OpenTofu pipelines.
- Manage and secure identities in Microsoft Entra ID through Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.
- Review network diagrams and proposed connectivity changes, provide security input on segmentation and sensitive data flows, and work with IT and SRE teams to address identified concerns.
- Administer Zero Trust network access and edge security tooling to secure access to corporate and cloud resources.
- Hands-on management of broader security solutions across the organization: SIEM, DLP, E/XDR, vulnerability management.
- Monitor security alerts, respond to and escalate incidents, and participate in the incident response on-call rotation.
- Conduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership.
- Develop queries, scripts, integrations, and automated workflows that improve cloud security operations.
- Collaborate with development teams to ensure security is continuously integrated into the SDLC and CI/CD pipeline.
- Conduct periodic cloud configuration and access reviews to ensure compliance with security standards.
- Participate in audits and assessments, supporting governance, risk management, and compliance (GRC) efforts.
What they are looking for
Read from apply.workable.com, last seen 1d ago.