6 months ago
Responsibilities
- Design, implement, and manage security controls and policies in AWS to protect data and services.
- Assess cloud environments for vulnerabilities and risks and recommend mitigation strategies.
- Integrate security practices into the DevOps lifecycle and secure development, deployment, and operational processes.
- Use and optimize Amazon GuardDuty, Amazon Inspector, AWS IAM, AWS KMS, AWS WAF, and AWS Shield, while evaluating third-party solutions.
- Support penetration tests and security audits and drive prompt remediation of findings.
- Monitor emerging security threats, vulnerabilities, and cloud compliance requirements and provide strategic guidance.
- Mentor junior security team members and engineers and promote organizational security awareness.
- Collaborate with stakeholders to integrate security requirements into engineering projects and business initiatives.
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
- At least 5 years of information security experience, including at least 3 years focused on cloud security in AWS environments.
- Deep understanding of AWS architecture, security services, and cloud application and data security practices.
- Experience with infrastructure-as-code tools such as Terraform or AWS CloudFormation and AWS security automation.
- Proficiency in Python, TypeScript, or Go for security automation and tool integration.
- Familiarity with containerization and microservices security.
- Knowledge of network security, encryption technologies, and secure coding practices.
- Experience finding and resolving code security issues and vulnerabilities, including Bug Bounty programs and secure-by-design practices.
- Advanced degrees or certifications such as CISSP or AWS Certified Security Specialty are advantageous.
- Strong analytical, communication, leadership, collaboration, organization, and prioritization abilities.
Benefits
- 401(k) match
- 100% coverage of medical, dental, and vision premiums for the employee and dependents
- 12 weeks of paid parental leave for all parents with no waiting period
- Stipends for family-forming needs and gender-affirming care
- Unlimited PTO
- Geo-adjusted compensation and meaningful equity are offered, though amounts are not stated
About Cape
Cape builds a privacy-first mobile network in the U.S., providing cellular service that minimizes data collection and supports secure communication for consumers, businesses, and government customers. It sells subscription wireless plans and related security features, enabling organizations to deploy protected mobile connectivity without relying on legacy tracking practices. Founded in 2022, the company is headquartered in Arlington, Virginia.