Manager, Cloud Security Engineering

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 24%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Workstreet

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

📋 Description

• Lead, manage, coach, and grow Cloud Security Engineers through expectations, feedback, performance reviews, and career paths • Build the interview process, recruit and select engineers, and onboard them • Plan capacity, assign engineers to engagements, track milestones and quality, and keep concurrent engagements on schedule • Serve as escalation point for technical and relationship issues • Lead client conversations with engineering leads and executives on scope, risk, and remediation priorities • Define and maintain reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, and code review practices • Review AWS multi-account, Azure Hub-Spoke, Landing Zone, IAM, network segmentation, and encryption architectures • Set the approach for AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud • Establish logging pipelines for SIEM ingestion • Establish guardrails and automated remediation workflows, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps • Ensure technical controls satisfy SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP requirements • Ensure evidence supports audit readiness • Set escalation paths for cloud security incidents and ensure containment, diagnostics, and post-incident improvements • Coordinate with GRC delivery teams and provide technical input on scoping, statements of work, and new client opportunities • Track delivery health, remediation cycle times, and module reuse • Invest in tooling and automation • Participate in architecture reviews, complex remediations, and client workshops • Work with client engineering leads and executives during U.S. Eastern Time business hours

🎯 Requirements

• Experienced people manager who has hired, coached, and retained engineers • Deep, hands-on experience securing AWS, Azure, and GCP environments • Expertise in IAM strategy, including RBAC, ABAC, permission boundaries, and federated identity via Okta or Entra ID • Experience with network zoning, encryption, and logging • Fluency in Terraform • Working knowledge of CloudFormation, Python, or Bash • Ability to review module design, versioning, state management, and provider security controls • Experience mapping cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements • Experience balancing multiple client portfolios and competing priorities in a fast-paced startup environment • Experience partnering with US-based technology founders, DevOps leads, and executive teams • Precise written and verbal English communication skills • Active certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA • Experience building or scaling a security engineering team in a consulting, MSSP, or hyper-growth technology environment • Experience with capacity planning and resourcing across client engagements • Hands-on experience with CMMC-compliant enclaves or FedRAMP security architectures, including NIST 800-53 and NIST 800-171 control implementation • Practical experience configuring and enforcing FIPS 140 standards across cloud services • Experience securing microservice architectures, Docker, and Kubernetes, including runtime security controls and vulnerability scanning • Direct experience with Zero Trust deployment models, identity-centric security policies, network micro-segmentation, and context-aware access • Advanced use of logging platforms, SIEM, vulnerability management engines, and threat hunting feeds • Excellent written and verbal English communication skills • Reliable, high-speed internet connection and professional home office environment • Availability for a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities • Must participate in live video interviews with camera on and verify identity during recruitment and onboarding • Employment contingent upon identity verification and background screening, where permitted by law • Must be authorized to work in the U.S. without visa sponsorship now or in the future

🏖️ Benefits

• Career development with mentorship and training opportunities • Reimbursement for approved role-relevant training and certification courses • Competitive base salary with regular performance reviews linked to merit-based appraisals • Bonus opportunities • Significant room for career advancement • Remote-first culture and flexibility to work from anywhere • Global team collaboration

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume