Cloud Vulnerability Response Specialist Sr.
Criterion Systems, LLC (CS) is seeking a highly skilled Cloud Vulnerability Response Specialist Sr. to support enterprise cybersecurity initiatives focused on securing cloud-based environments. This position is responsible for identifying, analyzing, and mitigating vulnerabilities across cloud infrastructure while supporting incident response, risk management, and continuous security improvement efforts. The ideal candidate will possess deep expertise in cloud security technologies, vulnerability management, and cloud risk assessment methodologies.
Compensation & Benefits
Estimated Salary: $150,000-$160,000
Pay commensurate with experience, qualifications, certifications, and overall fit for the position.
Eligible employees may receive a comprehensive benefits package that may include:
Medical, Dental, and Vision Insurance
401(k) Retirement Plan
Paid Time Off and Holidays
Professional Development Opportunities
Additional company-sponsored benefits
Benefits are subject to change based on company policy.
Key Responsibilities
Identify, analyze, and mitigate vulnerabilities in cloud-based systems utilizing advanced cloud security expertise.
Monitor cloud environments for security breaches and respond to security incidents to minimize operational and business impact.
Conduct security assessments and vulnerability analyses to strengthen cloud security posture.
Develop, implement, and maintain security protocols, standards, and procedures for cloud-based environments.
Perform gap analyses to identify weaknesses in existing cloud security controls and risk management processes.
Design and implement risk management programs that enhance protection of cloud assets.
Utilize and optimize cloud security tools to detect, prevent, and respond to threats.
Collaborate with technical and business stakeholders to ensure security controls align with organizational objectives and industry best practices.
Provide subject matter expertise on cloud security policies, standards, and procedures.
Stay current on emerging threats, vulnerabilities, technologies, and security trends to continuously improve cloud defense capabilities.
Required Qualifications
Education
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline preferred. Experience
Minimum of eight (8) years of cybersecurity experience.
At least three (3) years of experience focused on cloud security and vulnerability management.
Demonstrated experience supporting security incident response and vulnerability remediation efforts in cloud environments.
Experience implementing and maintaining cloud security controls and risk management programs.
Technical Knowledge & Skills
Strong understanding of cloud infrastructure platforms, including:
Amazon Web Services (AWS)
Microsoft Azure
Google Cloud Platform (GCP)
Experience with cloud security tools such as:
AWS GuardDuty
Prisma Cloud
Knowledge of cloud-native security technologies and SIEM solutions.
Experience conducting security assessments, vulnerability analysis, and remediation planning.
Understanding of risk management frameworks and compliance standards, including:
NIST
ISO 27001
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent written and verbal communication skills with the ability to communicate technical concepts to non-technical audiences.
Preferred Certifications
AWS Certified Security – Specialty
Microsoft Certified: Azure Security Engineer Associate
Certified Information Systems Security Professional (CISSP)
Other relevant cloud security certifications preferred.
Similar Searchable Job Titles
Cloud Security Engineer
Cloud Security Analyst
Vulnerability Management Specialist
Cloud Cybersecurity Engineer
Cloud Risk Management Analyst
Keywords
Cloud Security
Vulnerability Management
Incident Response
Risk Management
AWS
Azure
Google Cloud Platform,
Security Assessments
Cybersecurity
Cloud Infrastructure
loud Monitoring
Threat Detection
SIEM
Compliance
NIST
ISO 27001.
##CherokeeFederal #LI -SM2 #AppC2
Company Information:
Criterion is a part of Cherokee Federal – the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government’s mission with compassion and heart. To learn more about Criterion, visit cherokee-federal.com.
Legal Disclaimer
All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law. Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.
Cherokee Federal is a government contracting firm that provides specialized cybersecurity, software development, and information assurance services to federal agencies. The company supports critical maritime and defense operations through expertise in system authorization, continuous monitoring, and Salesforce platform implementations for public sector and DoD environments. Cherokee Federal works with agencies like MARAD to strengthen security posture of IT and OT systems while maintaining compliance with federal cybersecurity requirements.
