Cybersecurity Engineer - Terraform & CSPM

Lspedia - Farmington, MI

Full-time

Farmington, MI

Professional, Scientific, and Technical Services

About the position

We are seeking an experienced Cybersecurity Engineer to join our security team. This role is crucial in securing our digital infrastructure, enhancing cloud security, and ensuring compliance with industry standards. The ideal candidate will have hands-on experience with tools like Terraform, Tenable, and Cloud Security Posture Management (CSPM) solutions, a deep understanding of NIST cybersecurity controls, and the ability to remediate cloud vulnerabilities through configuration updates or codebase modifications.

Responsibilities

• Design, implement, and manage security controls across cloud environments to ensure security and mitigate risks.
• Identify, assess, and remediate vulnerabilities using tools like Microsoft Defender for Cloud, Datadog, and Tenable.
• Address cloud vulnerabilities by updating configurations or code, collaborating with software engineers to align security with development practices.
• Develop, secure, and maintain infrastructure using Terraform, enforcing security compliance.
• Implement NIST (80053, CSF) cybersecurity controls, support compliance efforts, and provide security documentation for stakeholders.

Requirements

• 3+ years in cybersecurity engineering with practical remediation experience in cloud environments (AWS, Azure, or GCP).
• Proficiency with Tenable or similar vulnerability management tools and CSPM solutions.
• Experience with Terraform to maintain secure infrastructure-as-code processes.
• Strong understanding and hands-on experience implementing NIST 80053 or CSF cybersecurity controls.
• Experience responding to security questionnaires and providing documentation to clients, partners, or regulatory bodies.

Nice-to-haves

• Familiarity with ISO 27001 or FedRAMP compliance.
• Proficiency in scripting (Python, PowerShell) for security tasks and remediation.
• Relevant security certifications like CISSP, CCSP, or AWS Security Specialty.