{"id":4010000,"url":"https://alion.io/job/sand-technologies-cloud-security-engineer","title":"Cloud Security Engineer","company":{"id":3417,"name":"Sand Technologies","domain":"sandtechholdings.com","url":"https://alion.io/company/sandtechholdings","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":35,"ghost_share":0.029,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":162,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Azure AKS","optional":true},{"name":"Kubernetes","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-10T08:35:48Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T09:33:30Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Sand\nSand Technologies is a global Physical AI company using data and AI to make critical industries work better. We partner with governments, cities and enterprises to improve how essential systems operate across healthcare, water, energy, telecommunications and infrastructure.\nOur work delivers proven real-world impact. We have built AI systems that help manage London’s water supply, supported telecom network planning across hundreds of cities, and developed digital healthcare platforms serving tens of millions of people across Africa. From intelligent command centers to AI-powered infrastructure platforms, we help organizations sense, analyze and act in complex environments.\nOur people are ambitious, curious and relentlessly practical. Our teams work alongside clients in the field, solving hard problems and deploying solutions that last. With colleagues across Africa, Europe, the UK and the US, we operate across the full stack - from research and engineering to deployment and capability building.\nOur mission is simple: to harness AI to solve humanity’s most pressing challenges.\nAbout the role\nSand Technologies is standing up its security engineering capability, and you'll be engineer #1, working directly with the Director of Cyber Security. We are looking for a candidate with subject matter expertise in implementation and management of cloud security across AWS, Azure, and GCP. \nThis is a hands-on role, with an opportunity to have a deep impact on audits, executive metrics, and the security of a live AI product. Most junior security roles are ticket queues. This one is a program build: you'll touch three clouds, a modern Microsoft security stack, audit evidence for four frameworks, and the security posture of a shipping AI product - with direct mentorship from a security director and visible impact into executive reporting from your first quarter.\nWhat you’ll do\nServe as second responder on security incidents across Sand: fraud, phishing, endpoint, identity, shadow IT, and cloud, running evidence collection, triage, containment coordination, and lessons learned\nOperate and tune our security stack: Microsoft Defender for Cloud/Endpoint, Intune, Sentinel, and vulnerability scanning across a multi-account AWS organization, GCP, and Azure\nBuild and maintain the vulnerability data pipeline: raw exports from cloud-native tools, deduplication by unique CVE, finding-age and SLA computation, and the feeds behind our security metrics\nRun tooling validations - side-by-side parity testing when we transition platforms, with evidence that stands up to audit\nPartner with infrastructure/DevOps teams on remediation: container base-image hygiene, registry lifecycle policies, exposure management, and verifying closure on the next scan\nTrack remediation SLAs, support exception and risk-acceptance workflows, and keep runbooks and process documentation current\nBuild detection in Microsoft Sentinel: onboarding and tuning log sources across email, identity, endpoint, SaaS, and cloud\nEmbed security gates in CI/CD pipelines and stand up telemetry for new environments\nContribute evidence to Cyber Essentials, ISO 27001, SOC 2, and ISO/IEC 42001 readiness workstreams\nIn your first 90 days you will:\nOwn the weekly vulnerability data pipeline end-to-end (exports → dedup → SLA math → metrics feed)\nComplete one tooling parity validation with documented, audit-ready evidence\nShip one structural remediation with the infrastructure team (e.g., registry lifecycle policies) and verify closure by scan\nStand up telemetry on one new cloud environment from zero\nStep into the second-responder seat: run one incident or tabletop end to end, with documented lessons fed back into the runbooks\nWho you are\ngrounded by at least 5-7 years of professional cloud/DevOps experience and at least 2-4 years in security engineering, cloud/DevOps with a security focus, or security operations\nWorking proficiency in at least one major cloud (AWS, Azure, or GCP) and hunger to learn the other two\nScripting for automation - Python preferred; comfort with REST APIs and structured data (JSON/CSV); KQL or SQL a plus\nUnderstanding of vulnerability management fundamentals (CVE/CVSS, scanning vs. remediation, SLA-driven programs) and a calm, methodical approach to incident response\nClear writing and the ability to explain a finding to an engineer and its risk to an executive\nSelf-direction - you'll have a director's guidance, not a script\n\nPreferred experience\nHands-on time with Microsoft Defender / Sentinel, or Qualys\nTerraform or other infrastructure-as-code exposure\nContainer security (ECR/AKS image scanning, lifecycle policies)\nCyber Essentials, ISO 27001, SOC 2, or ISO/IEC 42001 evidence experience\nRelevant certifications: SC-200, AZ-500, Security+ (or equivalent demonstrated skill)\nHow we work\nDue to the highly collaborative and internationally distributed nature of our work, successful candidates must be comfortable operating in small teams while contributing to larger, globally coordinated efforts. A strong sense of ownership, self-motivation and discipline in maintaining clear and consistent communication through virtual collaboration tools and video conferencing is essential.","description_format":"text","description_chars":5222,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Simulation & Digital Twin Software","IT Consulting & Digital Transformation","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-11-10T09:33:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":162,"reasons":["conf:1","win:early"],"computed_at":"2026-11-10T11:13:07Z"},"pay":null,"html_url":"https://alion.io/job/sand-technologies-cloud-security-engineer","json_url":"https://alion.io/job/sand-technologies-cloud-security-engineer.json","meta":{"generated_at":"2026-11-10T11:13:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26002,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3417},"rest":"https://alion.io/mcp/rest/get_company?id=3417"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsand-technologies-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsand-technologies-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsand-technologies-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sand-technologies-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsand-technologies-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4010000}},{"tool":"search_jobs","arguments":{"company":"sandtechholdings.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4010000},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}