Job Title: Cloud Security Operations Engineer Location: San Jose, California Reports to: Senior Cloud Security Architect Job Overview: We are seeking a skilled and passionate Cloud Security ...
Job Title: Cloud Security Operations Engineer Location: San Jose, California Reports to: Senior Cloud Security Architect Job Overview: We are seeking a skilled and passionate Cloud Security ...
Job Title: Cloud Security Operations Engineer Location: San Jose, California Reports to: Senior Cloud Security Architect Job Overview: We are seeking a skilled and passionate Cloud Security ...
Job Title: Cloud Security Operations Engineer Location: San Jose, California Reports to: Senior Cloud Security Architect Job Overview: We are seeking a skilled and passionate Cloud Security ...
Cloud Security Operations Readiness Sacramento, CA 10+ months Required Skills: Cloud Access Security Broker (CASB) - Best practice configuration and implementation of Microsoft Cloud App Security ...
Cloud Security Operations Readiness Sacramento, CA 10+ months Required Skills: Cloud Access Security Broker (CASB) - Best practice configuration and implementation of Microsoft Cloud App Security ...
Cloud Security Operations Engineer
Fort Worth, TX · On-site
$50 - $55/hr
Cloud Security Operations Engineer/Manager Location: Fort Worth, Texas 76155 Duration: Contract Job ID: 178851 Job Overview: We are seeking a highly skilled Engineer - Cloud Security to join our team ...
Cloud Security Operations Engineer
Fort Worth, TX · On-site
$50 - $55/hr
Cloud Security Operations Engineer/Manager Location: Fort Worth, Texas 76155 Duration: Contract Job ID: 178851 Job Overview: We are seeking a highly skilled Engineer - Cloud Security to join our team ...
Cloud Security Operations Engineer
San Jose, CA · On-site
$78.52 - $146.02/hr
Job Overview Cadence is hiring a Cloud Security Operations Engineer. The role focuses on designing and maintaining robust security controls across AWS, Azure, GCP, and IBM Cloud. The engineer will ...
Cloud Security Operations Engineer
San Jose, CA · On-site
$78.52 - $146.02/hr
Job Overview Cadence is hiring a Cloud Security Operations Engineer. The role focuses on designing and maintaining robust security controls across AWS, Azure, GCP, and IBM Cloud. The engineer will ...
VP, Cloud Security Operations
Austin, TX · On-site
$154.71 - $257.91/hr
Serve as a cross‑functional engineering lead responsible for improving interoperability, integration, and cloud operational effectiveness across enterprise security technologies. * Partner with ...
VP, Cloud Security Operations
Austin, TX · On-site
$154.71 - $257.91/hr
Serve as a cross‑functional engineering lead responsible for improving interoperability, integration, and cloud operational effectiveness across enterprise security technologies. * Partner with ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
VP, Cloud Security Operations
Austin, TX · On-site
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
VP, Cloud Security Operations
Austin, TX · On-site
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
VP, Cloud Security Operations
Austin, TX · On-site
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
VP, Cloud Security Operations
Austin, TX · On-site
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements. * Develop and maintain ...
Job Summary : eTeam is seeking a Cloud Security Operations Engineer to support and enhance the security of their SaaS application ecosystem. This role involves continuous monitoring, proactive ...
Job Summary : eTeam is seeking a Cloud Security Operations Engineer to support and enhance the security of their SaaS application ecosystem. This role involves continuous monitoring, proactive ...
Oversee the operational management and continuous enhancement of cloud security capabilities across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, cloud identity, and ...
Oversee the operational management and continuous enhancement of cloud security capabilities across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, cloud identity, and ...
Oversee the operational management and continuous enhancement of cloud security capabilities across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, cloud identity, and ...
Oversee the operational management and continuous enhancement of cloud security capabilities across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, cloud identity, and ...
GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM , etc.). * Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege ...
GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM , etc.). * Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege ...
GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM , etc.). * Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege ...
GCP Security Command Center, Cloud Logging, Cloud Armor, KMS, IAM , etc.). * Partner with DevOps to implement secure baseline configurations and guardrails (network segmentation, least privilege ...
The Cloud Security Operations and Compliance Engineer will maintain compliance with security regulations for FedRAMP SaaS operations and ensure security for U.S. Federal environments.
The Cloud Security Operations and Compliance Engineer will maintain compliance with security regulations for FedRAMP SaaS operations and ensure security for U.S. Federal environments.
Cloud Security Architect
Dallas, TX · On-site
$64.75 - $86/hr
Leads strategic security initiatives to strengthen UTSW's cloud security posture and reduce risk ... Collaborate closely with the Cloud Engineering & operations team, Enterprise Architecture, DevOps, ...
Cloud Security Architect
Dallas, TX · On-site
$64.75 - $86/hr
Leads strategic security initiatives to strengthen UTSW's cloud security posture and reduce risk ... Collaborate closely with the Cloud Engineering & operations team, Enterprise Architecture, DevOps, ...
Cloud Security Engineer
Washington, DC · On-site
$120K - $130K/yr
We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division - a full-spectrum cybersecurity organization covering endpoint protection ...
Cloud Security Engineer
Washington, DC · On-site
$120K - $130K/yr
We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division - a full-spectrum cybersecurity organization covering endpoint protection ...
Cloud Security Operations information
See salary details
$22.5K - $37.5K
0% of jobs
$37.5K - $52.5K
0% of jobs
$52.5K - $67.5K
2% of jobs
$67.5K - $82.5K
1% of jobs
$82.5K - $97.5K
10% of jobs
$105.2K is the 25th percentile. Wages below this are outliers.
$97.5K - $112.5K
24% of jobs
The median wage is $121.4K / yr.
$112.5K - $127.5K
23% of jobs
$127.5K - $142.5K
14% of jobs
$144.5K is the 75th percentile. Wages above this are outliers.
$142.5K - $157.5K
14% of jobs
$157.5K - $172.5K
11% of jobs
$172.5K - $187.5K
2% of jobs
$22.5K
$125.4K
$187.5K
How much do cloud security operations jobs pay per year?
What is cloud security operations?
What are the key skills and qualifications needed to thrive in cloud security operations?
What are some common challenges faced by professionals in cloud security operations, and how can they be addressed?
What is the difference between Cloud Security Operations vs Cloud Security Engineer?
| Aspect | Cloud Security Operations | Cloud Security Engineer |
|---|---|---|
| Primary Focus | Monitoring, managing, and responding to security incidents in cloud environments | Designing, implementing, and maintaining security solutions for cloud infrastructure |
| Certifications | CompTIA Security+, CISSP, CCSP | AWS/Azure certifications, CISSP, CCSP |
| Work Environment | Security operations centers, cloud platforms, incident response teams | Development environments, cloud architecture teams, security design projects |
| Common Usage | Day-to-day security monitoring and incident handling | Security architecture and solution development |
While Cloud Security Operations focuses on ongoing security management and incident response within cloud environments, Cloud Security Engineers are responsible for designing and implementing security measures. Both roles require similar certifications and often collaborate to ensure comprehensive cloud security.
What job categories do people searching Cloud Security Operations jobs look for?
The top searched job categories for Cloud Security Operations jobs are:

Full-time
Medical, Dental, Vision, Retirement, PTO
Re-posted 8 days ago
Cadence Design Systems rating
9.0
Based on 5 frontline employees who took The Breakroom Quiz
34th of 246 rated software companies
Job description
Job Title: Cloud Security Operations Engineer
Location: San Jose, California
Reports to: Senior Cloud Security Architect
Job Overview:
We are seeking a skilled and passionate Cloud Security Operations Engineer to join our dynamic Information Security team. In this role, you will be responsible for designing, implementing, and maintaining robust security controls across our public cloud environments, including AWS, Azure, GCP, and IBM Cloud. As a hands-on technical expert, you will play a crucial role in enhancing our cloud security posture, with a primary focus on data protection and incident management. This position offers the opportunity to work in a collaborative environment, where you will contribute to the security and resilience of our cloud infrastructure.
Job Responsibilities:
1. Secure Architecture and Engineering
- Design and deploy secure reference architectures across multi-cloud environments.
- Integrate security into Infrastructure-as-Code (IaC) using tools like Terraform, CloudFormation, and ARM Templates.
- Implement cloud-native security controls: VPCs, WAFs, DDoS, and endpoint protections.
- Ensure data protection via encryption, KMS/HSM, and DLP policies.
2. Identity and Access Management (IAM)
- Design, implement, and audit IAM policies, roles, service accounts, and federation models using least-privilege principles.
- Configure MFA, SSO, and PAM solutions for secure cloud access.
3. Monitoring, Detection, and Response
- Configure and maintain cloud-native security tools (e.g., AWS Security Hub, Microsoft Defender for Cloud, Google Security Command Center).
- Integrate cloud logs with SIEM systems for threat detection.
- Lead incident response efforts for cloud-related security events.
- Continuously monitor cloud environments using CSPM, CNAPP, and cloud-native security tools to identify, prioritize, and remediate security misconfigurations and policy violations.
- Track and manage cloud security findings through remediation workflows.
- Partner with Cloud Platform, Infrastructure, and Application teams to coordinate remediation of identified security risks and vulnerabilities.
- Conduct root cause analysis of recurring cloud security issues and recommend preventive controls and automation improvements.
4. Cloud Data Loss Prevention (DLP) Management
- DLP Alert Triage and Investigation: Monitor, triage, and investigate all DLP alerts and events. Differentiate between policy violations, potential insider threats, and false positives, escalating confirmed incidents to the Incident Response team.
- Tool Optimization and Tuning: Serve as the subject matter expert (SME) for Cloud DLP tools (e.g., Microsoft Purview, Google DLP, dedicated CASB solutions). Continuously tune policies and rulesets to minimize alert fatigue while maintaining high fidelity.
- Reporting and Compliance: Generate regular reports on DLP effectiveness, policy violations, and risk trends for leadership and compliance/audit teams (e.g., SOC 2, HIPAA, GDPR).
- Data Classification Integration: Collaborate with Governance, Risk, and Compliance (GRC) teams to ensure DLP policies align with the corporate data classification framework.
5. Automation and DevSecOps
- Develop automation scripts (Python, PowerShell, Bash) and serverless functions (AWS Lambda, Azure Functions, Google Cloud Run).
6. Cloud Security Posture Management & Compliance
- Continuously assess AWS, Azure, and GCP environments using CSPM platforms to identify misconfigurations, excessive permissions, exposed resources, compliance gaps, and other security risks.
- Develop, maintain, and enforce cloud security baselines aligned with industry standards, regulatory requirements, and organizational security policies.
- Perform periodic cloud security assessments and audits using CIS Benchmarks, CSA Cloud Controls Matrix (CCM), NIST, and internal security standards.
- Drive remediation of findings identified through CSPM monitoring, security assessments, audits, compliance reviews, and risk assessments.
- Support internal and external audits by providing cloud security evidence, compliance reporting, and remediation status updates.
7. Secure Access and Network Security Controls
- Enforce secure access patterns by eliminating unnecessary public exposure and implementing private endpoints, bastion hosts, AWS Systems Manager Session Manager, and least-privilege network segmentation.
- Enforce private connectivity architectures by leveraging:
- AWS PrivateLink
- Azure Private Endpoints
- Google Private Service Connect
- Eliminate unnecessary public exposure of cloud workloads, services, and management interfaces.
- Design and maintain least-privilege network segmentation and cloud-native firewall controls across multi-cloud environments.
8. Cloud Workload Security and Hardening
- Establish and maintain secure cloud operating system baselines using CIS Benchmarks and vendor-recommended hardening standards.
- Perform periodic reviews and validation of operating system, virtual machine, and container security configurations.
- Collaborate with Infrastructure and Platform teams to implement hardened images and golden image standards.
- Monitor and remediate deviations from approved OS hardening baselines.
Job Qualifications:
Technical Expertise
- Deep knowledge of at least one cloud platform (AWS, Azure, or GCP).
- Proficiency in scripting: Python (preferred), PowerShell, Unix shell scripting.
- Strong understanding of networking and cloud-native network security.
- Experience with CSPM/CNAPP platforms such as CloudGuard Dome9, Wiz, Prisma Cloud, Microsoft Defender for Cloud, or similar solutions.
- Strong knowledge of CIS Benchmarks, CSA Cloud Controls Matrix (CCM), NIST, and industry cloud security best practices.
- Familiarity with securing OS and containerized environments (Docker, Kubernetes).
- Experience implementing secure cloud network architectures, private endpoints, bastion access patterns, and zero-trust security principles.
- Experience supporting cloud compliance, audit readiness, and regulatory assessments.
Education & Certification
- Bachelor's degree in computer science, Information Security, or related field (or equivalent experience).
- Preferred Certifications:
- AWS Certified Solutions Architect - Associate
- AWS Certified Security - Specialty
- Microsoft Certified: Azure Administrator Associate
- Microsoft Certified: Azure Security Engineer Associate
- Google Cloud: Associate Cloud Engineer
- Google Cloud: Professional Cloud Security Engineer
- (ISC)² Certified Cloud Security Professional (CCSP)
- (ISC)² Certified Information Systems Security Professional (CISSP)
Soft Skills
- Strong analytical and problem-solving abilities.
- Excellent communication and collaboration skills, especially with DevOps and engineering teams.
Cadence is committed to equal employment opportunity and employment equity throughout all levels of the organization. We strive to attract a qualified and diverse candidate pool and encourage diversity and inclusion in the workplace.
Travel: N/A
The hourly range for California is $57.21 to $106.25 per hour. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Please note that the hourly range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.
We're doing work that matters. Help us solve what others can't.
About Cadence Design Systems
Sourced by ZipRecruiter
Industry
Software development
Company size
5,001 - 10,000 Employees
Headquarters location
San Jose, CA, US
Year founded
1988