[Hiring] Associate Cloud Security Automation Engineer @GuidePoint Security

Role Description

We are seeking a motivated Associate Cloud Security Engineer to join our growing consulting team. This is an excellent opportunity for an early-career professional to develop expertise in cloud security while working alongside senior consultants on client engagements. You will support various organizations in securing their cloud-native workloads and gain hands-on experience with modern security automation tools and practices.

• Client Support: Assist senior consultants in client engagements, participating in meetings, taking notes, and supporting technical assessments under guidance.
• Kubernetes Security: Support the implementation of Kubernetes security controls including basic cluster hardening, network policies, and RBAC configurations while learning best practices.
• Policy as Code Support: Help implement security policies using tools like OPA (Open Policy Agent) or Kyverno, working under the mentorship of senior team members.
• Infrastructure as Code (IaC) Assistance: Support the development and review of secure IaC templates using Terraform, CloudFormation, or ARM templates with senior oversight.
• Secrets Management Implementation: Assist in configuring and implementing secrets management solutions like HashiCorp Vault, AWS Secrets Manager, or Akeyless.
• CI/CD Security Integration: Help integrate basic security controls into CI/CD pipelines using tools like GitHub Actions, GitLab CI, or Jenkins under senior guidance.
• Cloud Security Research: Research and document cloud security best practices, tools, and emerging threats to support team knowledge sharing.
• Documentation & Automation: Create documentation, scripts, and basic automation tools to support client deliverables and internal processes.
• Learning & Development: Actively participate in mentorship programs, shadowing senior consultants, and pursuing relevant certifications.
• Quality Assurance: Perform testing and validation of security configurations and automation scripts before client delivery.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• 1-3 years of experience in cloud computing, DevOps, or information security roles.
• Basic understanding of cloud platforms (AWS, Azure, or GCP) and their core services.
• Familiarity with containerization technologies, particularly Docker and basic Kubernetes concepts.
• Experience with at least one Infrastructure as Code tool (Terraform, CloudFormation, etc.).
• Basic scripting skills in Python, Bash, or PowerShell.
• Understanding of fundamental security concepts and best practices.
• Strong communication skills and eagerness to learn in a client-facing environment.
• Ability to work collaboratively and take direction from senior team members.

Requirements

• Basic knowledge of CI/CD platforms (GitHub Actions, GitLab CI, Jenkins).
• Exposure to Policy as Code concepts or tools.
• Understanding of secrets management principles.
• Familiarity with cloud security frameworks (CIS, NIST).
• Interest in pursuing security certifications such as:
• AWS Certified Cloud Practitioner or Security Specialty
• Kubernetes & Cloud Native Associate (KCNA)
• CompTIA Security+

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans).
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.