Cloud Security Engineer ($50 per hour on w2) (ONLY W2)

KTek Resourcing is seeking a Cloud Security Engineer to enhance their cloud security posture. The role involves managing cloud security across various environments, implementing security governance, and collaborating with DevOps teams to integrate security into CI/CD pipelines.

Responsibilities:

• Extensive experience in Cloud Security Posture Management (CSPM) , Cloud Workload Protection Platform (CWPP) , Data Security Posture Management (DSPM) , and AI Security Posture Management (AISPM) using tools like Prisma Cloud / Wiz
• Own and manage cloud security posture across GCP and other CSP environments including misconfiguration detection, remediation tracking, and compliance reporting
• Strong expertise in policy creation, alert triaging, and distribution to remediation teams , ensuring closure with governance oversight
• Ability to design and maintain secure cloud architectures aligned with enterprise and regulatory frameworks
• Drive vulnerability management lifecycle for cloud workloads, including Kubernetes clusters, containers, registries, and images
• Lead risk prioritization and reporting , ensuring visibility to stakeholders through dashboards and executive summaries
• Implement and monitor security governance models , ensuring continuous improvement and audit readiness
• Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines

Requirements:

• 12+ Years of experience
• Extensive experience in Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), Data Security Posture Management (DSPM), and AI Security Posture Management (AISPM) using tools like Prisma Cloud / Wiz
• Own and manage cloud security posture across GCP and other CSP environments including misconfiguration detection, remediation tracking, and compliance reporting
• Strong expertise in policy creation, alert triaging, and distribution to remediation teams, ensuring closure with governance oversight
• Ability to design and maintain secure cloud architectures aligned with enterprise and regulatory frameworks
• Drive vulnerability management lifecycle for cloud workloads, including Kubernetes clusters, containers, registries, and images
• Lead risk prioritization and reporting, ensuring visibility to stakeholders through dashboards and executive summaries
• Implement and monitor security governance models, ensuring continuous improvement and audit readiness
• Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines
• Extensive experience in Containers and Cloud Vulnerability Management
• Strong hands-on experience in CSPM, CWPP, DSPM, and AISPM tools
• Experience in misconfiguration tracking, alert distribution workflows, and remediation coordination
• Good knowledge of compliance frameworks (CIS, NIST, ISO, STIG, etc.)
• Solid understanding of Kubernetes, Docker, and container lifecycle security
• Expertise in GCP security services and architecture, along with working knowledge of AWS security services
• Deep understanding of shared responsibility model, cryptography fundamentals, IAM, and zero-trust principles
• Ability to generate executive-level reports on risk posture, vulnerabilities, and compliance
• Wiz / Prisma Cloud preferred
• Hands-on experience with container security tools (Prisma Cloud, Wiz, Qualys, Lacework, etc.)
• Experience in DevOps/CI-CD tools such as Jenkins, GitHub, Terraform, Ansible
• Ability to write automation scripts using Python, Terraform, or Ansible
• Experience with BI reporting and dashboarding tools (Power BI, Tableau, or similar) for security metrics and governance reporting