Cloud Security Engineer - part-time (R-00250)

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM-$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experienced Cloud Security Engineer to support the design, implementation, monitoring, and continuous improvement of security capabilities across enterprise cloud environments in a part-time capacity. The ideal candidate will have strong hands-on experience securing Amazon Web Services (AWS) and Microsoft Azure environments, with additional exposure to Google Cloud Platform (GCP).

This role requires a technically proficient engineer with experience deploying and managing cloud security solutions, integrating security monitoring and threat detection tools, and securing containerized infrastructure. The successful candidate will collaborate with security operations, cloud engineering, and infrastructure teams to strengthen security posture, identify vulnerabilities, automate security controls, and respond to emerging threats.

Key Responsibilities

• Cloud Security Engineering: Design, implement, and maintain security controls across AWS and Azure environments, with additional support for GCP, ensuring secure configurations, access controls, and alignment with industry security best practices.
• Security Tool Implementation and Integration: Deploy, configure, optimize, and maintain security technologies including CrowdStrike, Splunk, Rapid7, and Red Canary to support endpoint protection, threat detection, vulnerability management, and security monitoring.
• Threat Detection and Incident Response: Investigate security alerts, analyze cloud infrastructure threats, support incident response activities, and develop remediation strategies to reduce organizational risk across cloud environments.
• Container and Infrastructure Security: Implement security controls for containerized environments using Kubernetes, Docker, and AWS Bottlerocket, including container hardening, vulnerability assessments, runtime protection, and secure deployment practices.
• Vulnerability Management and Security Automation: Identify, prioritize, and remediate cloud security vulnerabilities, automate repetitive security operations, and develop scripts or workflows to improve security efficiency and reduce manual intervention.
• Cross-Functional Security Collaboration: Partner with cloud architects, DevOps, infrastructure engineers, and security operations teams to integrate security into cloud deployments, support security assessments, and continuously improve enterprise security posture.

Position Requirements

• Cloud Security Experience: 3+ years of hands-on experience in cloud security, cybersecurity engineering, or infrastructure security, with demonstrated experience securing AWS and/or Microsoft Azure environments.
• Cloud Security Platforms: Strong knowledge of AWS and Azure security services, identity and access management (IAM), network security, logging, encryption, and cloud security configuration best practices.
• Security Tools: Practical experience deploying, administering, integrating, or troubleshooting one or more enterprise security platforms, preferably CrowdStrike, Splunk, Rapid7, or Red Canary.
• Container Security: Working knowledge of Kubernetes, Docker, and container security concepts, including vulnerability scanning, workload protection, and secure container configuration.
• Threat and Vulnerability Management: Experience identifying and investigating security threats, analyzing vulnerabilities, implementing remediation measures, and supporting incident response within cloud or hybrid environments.
• Technical Troubleshooting and Automation: Strong troubleshooting skills and experience with scripting or automation using Python, PowerShell, Bash, or infrastructure-as-code technologies such as Terraform or CloudFormation.

Preferred Qualifications

• Multi-Cloud Experience: Experience securing Google Cloud Platform (GCP) environments in addition to AWS and Azure, including cloud-native security services and cross-cloud security integrations.
• Advanced Container and Cloud-Native Security: Hands-on experience securing Kubernetes clusters, Docker workloads, and AWS Bottlerocket environments, including container runtime security and CI/CD security integrations.
• Specialized Security Experience: Additional experience with identity security, AI/ML security, SaaS application security, Zero Trust architecture, or cloud-native application protection platforms (CNAPP).
• Professional Certifications: Relevant certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, Certified Kubernetes Security Specialist (CKS), CISSP, CCSP, or equivalent cloud/security credentials.

Work Schedule and Availability

• Ability to support flexible working hours aligned with U.S time zones.
• Availability for occasional evening, overnight, or weekend coverage as required by operational needs, security incidents, or project deliverables.
• Ability to collaborate effectively with geographically distributed engineering and security operations teams.