Senior Cloud Platform Security Engineer
CoStar Group4 months ago
Arlington, VA, USASenior
Base Salary
$115k - $203k/yr
Responsibilities
- Enforce cloud security posture across AWS, GCP, and Azure using preventative and detective controls.
- Lead workload protection strategy across EKS clusters, including runtime monitoring, admission control, network policy, secrets management, and security guardrails.
- Secure AI-powered features, MCP server implementations, and agentic workflows through threat modeling, prompt-injection detection, and unauthorized-tool-use controls.
- Integrate automated scanning into CI/CD pipelines, implement infrastructure-as-code solutions, and drive automated remediation.
- Build detection patterns, escalation paths, validation methods, and incident-response readiness across cloud and Kubernetes environments.
- Partner with product engineering teams on secure coding, risk remediation, software supply chain security, and security standards.
- Mentor and train team members and take security initiatives from scoping through production rollout and operational ownership.
Requirements
- Bachelor’s degree from an accredited, not-for-profit, in-person university or college, preferably in Computer Science, Cybersecurity, or a related field.
- At least 6 years of hands-on security engineering experience.
- Depth in at least one and meaningful exposure to other areas including cloud-native security, Kubernetes hardening or monitoring, CI/CD and containerized deployments, IaC, software supply chain security, or AI-powered application security.
- Experience taking security initiatives from scoping through production rollout and operational ownership.
- Ability to author scripts or IaC from scratch using Python, PowerShell, Ansible, CloudFormation, Terraform, or a similar language.
- Experience in a software development environment with mature CI/CD practices.
- Preferred experience with AWS GuardDuty, Security Hub, EKS, OPA/Gatekeeper, Falco, Wiz, Datadog, Prisma Cloud, Orca, Upwind, or Snyk.
- Preferred familiarity with SBOM generation, dependency vulnerability management, build provenance, artifact signing, zero trust, IAM roles, service meshes, and serverless cloud deployments.
- Ability to communicate risk to different levels of leadership, drive remediation urgency, mentor team members, and use AI tools with sound engineering judgment.
Benefits
- Monday through Thursday in the office and Friday working from home in Arlington, VA or Richmond, VA.
- Comprehensive medical, vision, dental, prescription drug, life, legal, and supplementary insurance.
- Virtual and in-person mental health counseling for individuals and families.
- Commuter and parking benefits.
- 401(k) retirement plan with matching contributions.
- Employee stock purchase plan and paid time off.
- Tuition reimbursement, internal training, and professional and academic development support.
- On-site fitness center or reimbursed fitness center membership where available, with yoga, Pelotons, personal training, and group exercise classes.
- Employee Resource Groups, complimentary beverages, fresh fruit, and healthy snacks.
Tech Stack
Categories
About CoStar Group
CoStar Group builds subscription databases, analytics, and online marketplaces for commercial and residential real estate professionals, investors, and advertisers. Its portfolio includes CoStar (research and data), LoopNet (commercial listings), and Apartments.com (rental listings), generating revenue from subscriptions, listings, and advertising. The company is publicly traded on NASDAQ (CSGP) and is headquartered in Arlington, Virginia, with inclusion in the S&P 500 index.