Cloud Vulnerability Response Specialist

Cloud Vulnerability Response Specialist

Criterion Systems, LLC (CS) is seeking a highly skilled Cloud Vulnerability Response Specialist to support enterprise cybersecurity initiatives focused on securing cloud-based environments. This position is responsible for identifying, analyzing, and mitigating vulnerabilities across cloud infrastructure while supporting incident response, risk management, and continuous security improvement efforts. The ideal candidate will possess deep expertise in cloud security technologies, vulnerability management, and cloud risk assessment methodologies.

Compensation & Benefits

Estimated Salary: $145,000-$150,000 

Pay commensurate with experience, qualifications, certifications, and overall fit for the position.

Eligible employees may receive a comprehensive benefits package that may include:

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Paid Time Off and Holidays
• Professional Development Opportunities
• Additional company-sponsored benefits

Benefits are subject to change based on company policy.

Key Responsibilities

• Identify, analyze, and mitigate vulnerabilities in cloud-based systems utilizing advanced cloud security expertise.
• Monitor cloud environments for security breaches and respond to security incidents to minimize operational and business impact.
• Conduct security assessments and vulnerability analyses to strengthen cloud security posture.
• Develop, implement, and maintain security protocols, standards, and procedures for cloud-based environments.
• Perform gap analyses to identify weaknesses in existing cloud security controls and risk management processes.
• Design and implement risk management programs that enhance protection of cloud assets.
• Utilize and optimize cloud security tools to detect, prevent, and respond to threats.
• Collaborate with technical and business stakeholders to ensure security controls align with organizational objectives and industry best practices.
• Provide subject matter expertise on cloud security policies, standards, and procedures.
• Stay current on emerging threats, vulnerabilities, technologies, and security trends to continuously improve cloud defense capabilities.

Required Qualifications

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline preferred.

Experience

• Minimum of eight (8) years of cybersecurity experience.
• At least three (3) years of experience focused on cloud security and vulnerability management.
• Demonstrated experience supporting security incident response and vulnerability remediation efforts in cloud environments.
• Experience implementing and maintaining cloud security controls and risk management programs.

Technical Knowledge & Skills

• Strong understanding of cloud infrastructure platforms, including:
  • Amazon Web Services (AWS)
  • Microsoft Azure
  • Google Cloud Platform (GCP)
• Experience with cloud security tools such as:
  • AWS GuardDuty
  • Prisma Cloud
• Knowledge of cloud-native security technologies and SIEM solutions.
• Experience conducting security assessments, vulnerability analysis, and remediation planning.
• Understanding of risk management frameworks and compliance standards, including:
  • NIST
  • ISO 27001
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent written and verbal communication skills with the ability to communicate technical concepts to non-technical audiences.

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Certified Information Systems Security Professional (CISSP)
• Other relevant cloud security certifications preferred.

Similar Searchable Job Titles

• Cloud Security Engineer
• Cloud Security Analyst
• Vulnerability Management Specialist
• Cloud Cybersecurity Engineer
• Cloud Risk Management Analyst

Keywords

Cloud Security

 Vulnerability Management

 Incident Response

Risk Management

 AWS

 Azure

 Google Cloud Platform,

Security Assessments

 Cybersecurity

 Cloud Infrastructure

loud Monitoring

Threat Detection

 SIEM

 Compliance

 NIST

ISO 27001.

##CherokeeFederal #LI -SM2 #AppC2

Company Information:

Criterion is a part of Cherokee Federal – the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government’s mission with compassion and heart. To learn more about Criterion, visit cherokee-federal.com.

Legal Disclaimer

All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law. Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.