Senior Cloud Platform Security Engineer
CoStar GroupBase Salary
$115k - $203k/yr
Responsibilities
- Enforce cloud security posture across AWS, GCP, and Azure using preventative and detective controls.
- Lead workload protection strategy across EKS clusters, including runtime monitoring, admission control, network policy, secrets management, and security guardrails.
- Secure AI-powered features, MCP server implementations, and agentic workflows through threat modeling, prompt-injection detection, and unauthorized-tool-use controls.
- Integrate automated scanning into CI/CD pipelines, implement infrastructure-as-code solutions, and drive automated remediation.
- Build detection patterns, escalation paths, validation methods, and incident-response readiness across cloud and Kubernetes environments.
- Partner with product engineering teams on secure coding, risk remediation, software supply chain security, and security standards.
- Mentor and train team members and take security initiatives from scoping through production rollout and operational ownership.
Requirements
- Bachelor’s degree from an accredited, not-for-profit, in-person university or college, preferably in Computer Science, Cybersecurity, or a related field.
- At least 6 years of hands-on security engineering experience.
- Depth in at least one and meaningful exposure to other areas including cloud-native security, Kubernetes hardening or monitoring, CI/CD and containerized deployments, IaC, software supply chain security, or AI-powered application security.
- Experience taking security initiatives from scoping through production rollout and operational ownership.
- Ability to author scripts or IaC from scratch using Python, PowerShell, Ansible, CloudFormation, Terraform, or a similar language.
- Experience in a software development environment with mature CI/CD practices.
- Preferred experience with AWS GuardDuty, Security Hub, EKS, OPA/Gatekeeper, Falco, Wiz, Datadog, Prisma Cloud, Orca, Upwind, or Snyk.
- Preferred familiarity with SBOM generation, dependency vulnerability management, build provenance, artifact signing, zero trust, IAM roles, service meshes, and serverless cloud deployments.
- Ability to communicate risk to different levels of leadership, drive remediation urgency, mentor team members, and use AI tools with sound engineering judgment.
Benefits
- Monday through Thursday in the office and Friday working from home in Arlington, VA or Richmond, VA.
- Comprehensive medical, vision, dental, prescription drug, life, legal, and supplementary insurance.
- Virtual and in-person mental health counseling for individuals and families.
- Commuter and parking benefits.
- 401(k) retirement plan with matching contributions.
- Employee stock purchase plan and paid time off.
- Tuition reimbursement, internal training, and professional and academic development support.
- On-site fitness center or reimbursed fitness center membership where available, with yoga, Pelotons, personal training, and group exercise classes.
- Employee Resource Groups, complimentary beverages, fresh fruit, and healthy snacks.
Tech Stack
Categories
About CoStar Group
CoStar Group (NASDAQ: CSGP) is a global leader in commercial real estate information, analytics, online marketplaces, and 3D digital twin technology. Founded in 1986, CoStar Group is dedicated to digitizing the world’s real estate, empowering all people to discover properties, insights, and connections that improve their businesses and lives. CoStar Group’s major brands include CoStar, a leading global provider of commercial real estate data, analytics, and news; LoopNet, the most trafficked commercial real estate marketplace; Apartments.com, the leading platform for apartment rentals; Homes.com, the fastest-growing residential real estate marketplace; and Domain, one of Australia’s leading property marketplaces. CoStar Group’s industry-leading brands also include Matterport, a leading spatial data company whose platform turns buildings into data to make every space more valuable and accessible, STR, a global leader in hospitality data and benchmarking; Ten-X, an online platform for commercial real estate auctions and negotiated bids; and OnTheMarket, a leading residential property portal in the United Kingdom. CoStar Group’s websites attracted over 143 million average monthly unique visitors in the third quarter of 2025, serving clients around the world. Headquartered in Arlington, Virginia, CoStar Group is committed to transforming the real estate industry through innovative technology and comprehensive market intelligence. From time to time, we plan to utilize our corporate website as a channel of distribution for material company information. For more information, visit CoStarGroup.com.