{"id":972666,"url":"https://alion.io/job/anavation-cloud-security-engineer","title":"Cloud Security Engineer","company":{"id":5038,"name":"AnaVation","domain":"anavationllc.com","url":"https://alion.io/company/anavation","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":79,"open_postings":6,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Antonio, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":225000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":344},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"Incident Management","optional":false},{"name":"Istio","optional":false},{"name":"Linux","optional":false},{"name":"Okta","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true},{"name":"C++","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"Java","optional":true},{"name":"Kubernetes","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-09-16T16:41:10Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-12T23:10:05Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":26},"description":"Description of Task to be Performed:\nAnaVation is seeking a Cloud Security Engineer to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will lead zero trust engineering, interoperability, and modern security capability development across the Government enterprise. The Cloud Security Engineer will manage security systems and tools for cloud technologies, investigate and enhance existing cloud structures, and drives issue identification/resolution, integration, gap assessment, and continuous improvement, while providing flexible reach-back across the Government’s Cyber Assessment Roadmap.\nPosition Responsibilities: This position sets the engineering direction for the Government’s zero trust and cloud security modernization, translating roadmap objectives into deployed, measurable capability.\nResponsibilities include:\nLead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirements evolve.\nDesign, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible.\nAdminister relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; apply advanced networking, VPC, peering, and subnet design.\nSupport the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap, engineering, and integration.\nArchitect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP).\nAdvance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity.\nProvide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.\nProvide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders.\nCollaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git. \nSupport Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.\nMaintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.\nArchitect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics.\nEnforce Zero Trust through ICAM integration and micro-segmentation validation and manage enterprise security tooling.\nRequired Qualifications:\nClearance: U.S. Citizen, current TS/SCI; current CI Polygraph\nEducation: Bachelor's degree in Cybersecurity, Computer Science, Cloud Computing, IT, or related technical field.\nCertification: DoD 8140/8570 IAT Level II and an AWS certification.\nLocation: Full-time on-site in San Antonio, TX.\n Experience and knowledge:\nSubject Matter Expert: provides technical and management leadership on major tasks; domain and expert technical knowledge; decisions may have critical project impact; may lead others.\nHighly experienced with AWS; advanced networking, VPC, peering, and subnet experience.\nGitLab CI experience; Terraform experience including writing custom modules and collaboration at scale; Ansible experience.\nProficient in Linux; SRE experience for a mid-to-large enterprise system. \nDesigning, implementing, and maintaining AWS cloud architecture; creating/maintaining implementation documentation.\nExperience supporting RMF, ATO, cATO, and continuous monitoring; SIEM and security automation (familiarity with SOAR/IMS).\nMinimum years of experience - 10 years of relevant experience.\nPreferred Qualifications:\nClearance: Active TS/SCI\nEducation: Advanced degree in a related technical field.\nCertification: AWS Certified Security - Specialty, CCSP, CISSP, CKS, or CKA.\n Experience and Knowledge:\nGeneral cloud architecture experience with Azure or GCP (a plus, not required); experience with Kubernetes and Docker.\nKnowledge of SQL databases and coding skills (Java, Python, Go, C++); microservices architectures.\nSecurity framework experience (RMF, DISA STIG, CIS Benchmarks); software engineering background.\nExperience engineering SOAR/IMS and supporting Incident Response Teams (IRT); applying AI/ML to security automation.\nExperience supporting software factory environments (Iron Bank, Big Bang); IL4/IL5/IL6 cloud environments.","description_format":"text","description_chars":4513,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Cybersecurity","Military","Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-16T19:04:46Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.897,"p_room":0.9,"age_days":25,"expected_fill_days":52,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/anavation-cloud-security-engineer","json_url":"https://alion.io/job/anavation-cloud-security-engineer.json","meta":{"generated_at":"2026-10-12T23:49:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":39118,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5038},"rest":"https://alion.io/mcp/rest/get_company?id=5038"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanavation-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanavation-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanavation-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/anavation-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanavation-cloud-security-engineer"}]}