AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team, responsible for driving and enforcing security outcomes across a global multi-cloud environment spanning AWS, Microsoft Azure, and Microsoft m365. This role focuses on defining control requirements, identifying risk, and ensuring remediation of cloud security issues in partnership with Infrastructure and Application teams, who perform hands-on implementation. This position offers flexibility for a hybrid work schedule, combining in-office and virtual work, and must be based in Dallas or Houston, TX.Key Responsibilities:Cloud Security Governance &amp; Control Oversigh<ul><li>Perform Cloud Security Posture management (CSPM)</li><li>Utilize Palo Alto Prisma Cloud and Qualys TotalCloud to identify misconfigurations, vulnerabilities, and deviations from baseline</li><li>Define and initiate remediation requirements for Infrastructure and Application teams</li><li>Track and drive remediation efforts to closure</li><li>Partner with Security Architecture to translate cloud security standards into actionable control requirements</li><li>Ensure adherence to approved cloud security baselines and standards</li><li>Support exception management and risk acceptance processes with Cybersecurity Architecture and Cybersecurity GRC</li><li>Develop and deliver reporting on cloud security posture and risk to Cybersecurity and IT leadership</li></ul>Cloud Visibility &amp; Risk Management<ul><li>Own visibility into cloud security posture across AWS and Azure</li><li>Define risk metrics, prioritization models, and reporting standards</li><li>Improve asset visibility and configuration awareness across cloud environments</li></ul>Partnership &amp; Enablement<ul><li>Partner with Infrastructure and Application teams to ensure secure implementation of controls</li><li>Provide guidance on secure cloud practices aligned with enterprise standards (NIST, CIS)</li><li>Collaborate with stakeholders to prioritize and address security risks</li></ul>Cloud Logging &amp; Integration<ul><li>Support integration of cloud telemetry into enterprise logging and monitoring platforms</li><li>Enhance visibility into cloud activity and control effectiveness</li></ul>Proofpoint / Email Security (Secondary Responsibility)<ul><li>Provide backup support for Proofpoint Email Gateway</li><li>Assist with policy updates, tuning, and troubleshooting mail flow issues</li><li>Ensure continuity of secure email operations</li></ul>Continuous Improvement<ul><li>Drive continuous improvement of cloud security processes, tooling, and reporting</li><li>Stay current with evolving cloud threats and technologies</li></ul>

AECOM is the world&rsquo;s trusted infrastructure consulting firm, delivering professional services throughout the project lifecycle &ndash; from advisory, planning, design and engineering to program and construction management. On projects spanning transportation, buildings, water, new energy and the environment, our public- and private-sector clients trust us to solve their most complex challenges. Our teams are driven by a common purpose to deliver a better world through our unrivaled technical and digital expertise, a culture of equity, diversity and inclusion, and a commitment to environmental, social and governance priorities. AECOM is a Fortune 500 firm and its Professional Services business had revenue of $14.4 billion in fiscal year 2023. See how we are delivering sustainable legacies for generations to come at aecom.com and @AECOM.

Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)

AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team, responsible for driving and enforcing security outcomes across a global multi-cloud environment spanning AWS, Microsoft Azure, and Microsoft m365. This role focuses on defining control requirements, identifying risk, and ensuring remediation of cloud security issues in partnership with Infrastructure and Application teams, who perform hands-on implementation. This position offers flexibility for a hybrid work schedule, combining in-office and virtual work, and must be based in Dallas or Houston, TX.Key Responsibilities:Cloud Security Governance &amp; Control Oversigh<ul><li>Perform Cloud Security Posture management (CSPM)</li><li>Utilize Palo Alto Prisma Cloud and Qualys TotalCloud to identify misconfigurations, vulnerabilities, and deviations from baseline</li><li>Define and initiate remediation requirements for Infrastructure and Application teams</li><li>Track and drive remediation efforts to closure</li><li>Partner with Security Architecture to translate cloud security standards into actionable control requirements</li><li>Ensure adherence to approved cloud security baselines and standards</li><li>Support exception management and risk acceptance processes with Cybersecurity Architecture and Cybersecurity GRC</li><li>Develop and deliver reporting on cloud security posture and risk to Cybersecurity and IT leadership</li></ul>Cloud Visibility &amp; Risk Management<ul><li>Own visibility into cloud security posture across AWS and Azure</li><li>Define risk metrics, prioritization models, and reporting standards</li><li>Improve asset visibility and configuration awareness across cloud environments</li></ul>Partnership &amp; Enablement<ul><li>Partner with Infrastructure and Application teams to ensure secure implementation of controls</li><li>Provide guidance on secure cloud practices aligned with enterprise standards (NIST, CIS)</li><li>Collaborate with stakeholders to prioritize and address security risks</li></ul>Cloud Logging &amp; Integration<ul><li>Support integration of cloud telemetry into enterprise logging and monitoring platforms</li><li>Enhance visibility into cloud activity and control effectiveness</li></ul>Proofpoint / Email Security (Secondary Responsibility)<ul><li>Provide backup support for Proofpoint Email Gateway</li><li>Assist with policy updates, tuning, and troubleshooting mail flow issues</li><li>Ensure continuity of secure email operations</li></ul>Continuous Improvement<ul><li>Drive continuous improvement of cloud security processes, tooling, and reporting</li><li>Stay current with evolving cloud threats and technologies</li></ul>

Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)

About the Job

About the Company

AECOM

Similar Jobs

Security Engineer - Azure & Kubernetes (m/w/d)

Security Engineer - Azure & Kubernetes (m/w/d)

Specialist, DevSecOps

Specialist, DevSecOps

DevSecOps Engineer-Experienced

DevSecOps Engineer-Experienced

DevSecOps Engineer

DevSecOps Engineer

Network-Focused Cloud Engineer

Network-Focused Cloud Engineer

Network-Focused Cloud Engineer

Network-Focused Cloud Engineer

Network-Focused Cloud Engineer

Network-Focused Cloud Engineer

Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)

Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)

[IT Delivery Center] Cloud Security Analyst

[IT Delivery Center] Cloud Security Analyst

Cloud Security Specialist

Cloud Security Specialist