True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.
True Zero Technologies is seeking an experienced Cloud Security Engineer to support the design, implementation, monitoring, and continuous improvement of security capabilities across enterprise cloud environments in a part-time capacity. The ideal candidate will have strong hands-on experience securing Amazon Web Services (AWS) and Microsoft Azure environments, with additional exposure to Google Cloud Platform (GCP).
This role requires a technically proficient engineer with experience deploying and managing cloud security solutions, integrating security monitoring and threat detection tools, and securing containerized infrastructure. The successful candidate will collaborate with security operations, cloud engineering, and infrastructure teams to strengthen security posture, identify vulnerabilities, automate security controls, and respond to emerging threats.
Cloud Security Engineering: Design, implement, and maintain security controls across AWS and Azure environments, with additional support for GCP, ensuring secure configurations, access controls, and alignment with industry security best practices.
Security Tool Implementation and Integration: Deploy, configure, optimize, and maintain security technologies including CrowdStrike, Splunk, Rapid7, and Red Canary to support endpoint protection, threat detection, vulnerability management, and security monitoring.
Threat Detection and Incident Response: Investigate security alerts, analyze cloud infrastructure threats, support incident response activities, and develop remediation strategies to reduce organizational risk across cloud environments.
Container and Infrastructure Security: Implement security controls for containerized environments using Kubernetes, Docker, and AWS Bottlerocket, including container hardening, vulnerability assessments, runtime protection, and secure deployment practices.
Vulnerability Management and Security Automation: Identify, prioritize, and remediate cloud security vulnerabilities, automate repetitive security operations, and develop scripts or workflows to improve security efficiency and reduce manual intervention.
Cross-Functional Security Collaboration: Partner with cloud architects, DevOps, infrastructure engineers, and security operations teams to integrate security into cloud deployments, support security assessments, and continuously improve enterprise security posture.
Cloud Security Experience: 3+ years of hands-on experience in cloud security, cybersecurity engineering, or infrastructure security, with demonstrated experience securing AWS and/or Microsoft Azure environments.
Cloud Security Platforms: Strong knowledge of AWS and Azure security services, identity and access management (IAM), network security, logging, encryption, and cloud security configuration best practices.
Security Tools: Practical experience deploying, administering, integrating, or troubleshooting one or more enterprise security platforms, preferably CrowdStrike, Splunk, Rapid7, or Red Canary.
Container Security: Working knowledge of Kubernetes, Docker, and container security concepts, including vulnerability scanning, workload protection, and secure container configuration.
Threat and Vulnerability Management: Experience identifying and investigating security threats, analyzing vulnerabilities, implementing remediation measures, and supporting incident response within cloud or hybrid environments.
Technical Troubleshooting and Automation: Strong troubleshooting skills and experience with scripting or automation using Python, PowerShell, Bash, or infrastructure-as-code technologies such as Terraform or CloudFormation.