Cloud Security Engineer

ApTask is a leading global provider of workforce solutions and talent acquisition services, dedicated to shaping the future of work. They are seeking a Cloud Security Engineer to establish a cloud security program across a multi-cloud environment, focusing on building inventories, assessing security postures, and integrating workflows into ServiceNow.

Responsibilities:

• Enumerate cloud accounts, subscriptions, and projects (AWS, Azure, GCP, OCI) and Client material SaaS applications; reconcile into a ServiceNow CMDB cloud asset class
• Run cloud posture assessments; document misconfigurations and IAM, exposure, logging, and encryption gaps; risk-rank and map findings to owners; surface them in a ServiceNow posture dashboard
• Build the cloud account onboarding and monitoring workflow in ServiceNow (M&A fast-track)
• Onboard cloud telemetry into CrowdStrike, Obsidian, and Varonis DSPM; configure log forwarding (Cribl) into NG-SIEM; tune detections; route alerts into SecOps
• Author operational runbooks and operate the program in steady state; provide weekly status
• Apply frontier AI models (ChatGPT Enterprise, Claude) to accelerate inventory analysis, posture assessment, runbook drafting, and workflow design

Requirements:

• Hands-on multi-cloud security experience (AWS, Azure, and GCP at minimum; OCI a plus)
• Cloud security posture management (CSPM) concepts and tooling; assessment of IAM, network exposure, logging/telemetry, and encryption/key management
• ServiceNow build experience - workflows and CMDB integration. Non-negotiable; this is the engagement's core (capital) deliverable
• SIEM / log-pipeline integration (NG-SIEM, cloud log forwarding)
• Proficiency with AI frontier models (e.g., ChatGPT Enterprise, Claude) applied to security-engineering work, with an understanding of secure, governed AI use in an enterprise setting
• Strong documentation skills and the operational discipline to run steady-state operations
• Relevant cloud/security certifications are preferred but not required where hands-on experience is strong - for example, AWS / Azure / GCP security specialties, CCSP, CISSP, or GIAC cloud certifications
• Direct experience with CrowdStrike (Falcon Cloud Security / NG-SIEM), Obsidian SSPM, Zscaler, Varonis DSPM, Cribl, and Okta
• Insurance, financial-services, or other regulated-industry experience (GLBA, NY Client 500)
• Infrastructure-as-code familiarity (e.g., Terraform)