Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 30 days ago

Cloud Security Specialist

vafb45 open roles

Pay
$148,000 – $164,000 a year
Where
US, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCloud Security Specialistvafb · US, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on vafb's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 30 days ago

The posting

POSITION TITLE: Cloud Security Specialist

STATUS: Exempt

COMPENSATION RANGE: $148,000-$164,000 Annually

LOCATION: Based out of our beautiful West Creek Office, located at 12580 West Creek Pkwy, Richmond, VA 23238. Hybrid schedule is offered, in office 2 days a week, work from home 3 days a week, after training and probationary period is completed. No relocation offered.

REPORTS TO: Manager, Active Defense & Security Operations.

POSITION SUMMARY

The Cloud Security Specialist supports day-to-day execution of the organization’s cloud security program across Microsoft Azure and Amazon Web Services. The role monitors cloud security controls, secures identity and access, reviews cloud and network architecture, integrates security into deployment pipelines, protects cloud-hosted data, and coordinates remediation with Information Security, Infrastructure, and Application Development. This is a growth-oriented role for a candidate with foundational to intermediate cybersecurity, cloud, or DevOps experience.

PRIMARY DUTIES

Cloud Security Operations and Posture Management

  • Monitor Azure and AWS environments for misconfigurations, vulnerabilities, policy violations, suspicious activity, and drift from CIS Benchmarks and approved baselines.
  • Administer and tune cloud security posture management and cloud-native security services, including Microsoft Defender for Cloud, AWS Security Hub, and AWS GuardDuty.
  • Investigate cloud security alerts, document findings, coordinate remediation with system and application owners, and escalate high-risk findings to senior staff.
  • Maintain cloud security dashboards, asset inventories, and landing zone usage and reporting.

Identity and Access Management

  • Support Azure and AWS identity controls, including Microsoft Entra ID, AWS IAM, role-based access control (RBAC), least privilege, multifactor authentication, conditional access, and privileged access management.
  • Review roles, service principals, managed identities, access keys, and excessive or inactive access; support identity federation and SSO using OAuth 2.0, OpenID Connect, and SAML.

Cloud Architecture and Network Security

  • Support secure landing zone design, hub-and-spoke topology, environment separation, and network zoning using NSGs, AWS security groups, network ACLs, and private endpoints.
  • Support secure configuration of load balancers and gateways (Azure Application Gateway, Azure Load Balancer, AWS ALB/NLB, API gateways), cloud WAF, CASB, and API security controls.
  • Review proposed cloud architectures for sound security design and escalate design concerns to senior staff.

Secure Cloud Engineering and DevSecOps

  • Integrate security requirements into deployments; review infrastructure-as-code (Bicep, ARM, Terraform, CloudFormation) and configurations for security risks.
  • Support security scanning, secrets detection, and policy checks in Azure DevOps (ADO) pipelines.
  • Implement and maintain security policy as code using Azure Policy, AWS Service Control Policies, and AWS Config rules.

Data Security in the Cloud

  • Support secure configuration of storage, databases, encryption, secrets, and key management (Azure Key Vault, AWS KMS).
  • Support data classification, labeling, and DLP with Microsoft Purview, and governance controls for Microsoft Fabric and Copilot, including oversharing risk.

Monitoring and Incident Response

  • Ensure cloud audit, security, and data access logs reach security monitoring platforms; support investigations, triage, and documentation for cloud-related incidents.

Cloud Risk, Compliance, and Reporting

  • Support risk assessments, audit evidence collection, and assessment of cloud controls against NIST, CIS Benchmarks, NYDFS, Virginia BOI, PCI-DSS, and other requirements.
  • Prepare cloud security metrics and reports for leadership; document standards, procedures, diagrams, and exceptions.

ADDITIONAL DUTIES

  • Participate in security awareness, tabletop exercises, and training; perform other duties as assigned.

MINIMUM EDUCATIONAL / EXPERIENCE QUALIFICATIONS

  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field. Equivalent work experience in lieu of degree is considered.
  • Two or more years of experience in cybersecurity, network security, DevSecOps, or related work.
  • Three to five years of hands-on experience administering Microsoft Azure and/or Amazon Web Services.

MINIMUM SKILL QUALIFICATIONS

  • Working knowledge of cloud security, identity and access management, RBAC, cloud networking, encryption, logging, and secure configuration.
  • Experience reviewing infrastructure as code, deployment pipelines, containers, or cloud-hosted applications.
  • Strong analytical, troubleshooting, documentation, communication, and teamwork skills.

PREFERRED QUALIFICATIONS

  • Experience with Microsoft Entra ID, Microsoft Defender for Cloud, AWS Security Hub, AWS GuardDuty, SIEM, or comparable cloud security tools.
  • Experience with Azure DevOps pipelines, Git, and policy as code (Azure Policy, AWS SCPs, AWS Config).
  • Experience with landing zones, hub-and-spoke design, cloud WAF, CASB, API security, and Azure CAF or AWS Well-Architected Framework.
  • Experience with Microsoft Purview, Fabric, and Copilot governance; identity protocols (OAuth 2.0, OIDC, SAML, PKI).
  • Container security (Docker, Kubernetes) and scripting in Python or PowerShell.
  • Security+, Microsoft Azure Security Engineer Associate (AZ-500), AWS Certified Security – Specialty, or equivalent certification.
  • Familiarity with NIST CSF, CIS Controls, ISO 27001/2, PCI-DSS, SOX, HIPAA, GDPR, GLBA, CNAPP/CWPP concepts, EDR/MDR, and Linux and Windows administration.

REPORTING RELATIONSHIP

Reports To: Manager, Active Defense & Security Operations

OTHER DUTIES

This job description describes the general nature and level of work assigned and is not an exhaustive list of responsibilities, duties, or skills. Other job-related duties may be assigned.

At VA Farm Bureau, we provide an exceptional benefits package, including ongoing job development and support in all roles, paid training and continuing education reimbursement, medical and dental insurance available on your first day, generous employee 401K contribution, excellent Paid Time off (PTO) plan and more!

Virginia Farm Bureau Companies provide equal employment opportunity in all aspects of employment without regard to race, color, national origin, religion, gender, pregnancy, age, disability, orientation or veteran status.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against vafb's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on vafb's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    vafb's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.