3 hours ago
Remote, United StatesSenior
Base Salary
$180k - $240k/yr
Responsibilities
- Own security across cloud infrastructure, AI platforms, endpoints, identity, email, and business applications.
- Build detection and response capabilities for cloud, identity, and endpoint telemetry.
- Drive cloud and container security posture, including workload hardening, admission control, runtime protection, and vulnerability prioritization.
- Secure the software supply chain through static analysis, secret scanning, infrastructure-as-code scanning, dependency risk management, and artifact integrity controls.
- Design and enforce identity security, least-privilege access, encryption, logging, and organization-level cloud guardrails.
- Automate security controls and remediation using infrastructure as code and Python or Go.
- Protect sensitive, privileged, and regulated customer data.
Requirements
- At least 6 years of hands-on security engineering experience, including at least 3 years securing production cloud environments.
- Deep experience with public-cloud security, identity and access management, network segmentation, encryption and key management, logging, and organization-level guardrails.
- Production experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection.
- Hands-on experience with cloud security posture management, vulnerability prioritization, cloud workload protection, and enterprise EDR/XDR platforms.
- Experience building detections and conducting investigations across cloud, identity, and endpoint telemetry.
- Strong understanding of SSO, MFA, conditional access, and least-privilege access for engineers and service accounts.
- Experience securing CI/CD and software supply chains, including static analysis, secret scanning, infrastructure-as-code scanning, dependency risk, and artifact integrity.
- Infrastructure-as-code experience and the ability to remediate findings directly.
- Proficiency in Python or Go for automation, tooling, and detection engineering.
- Experience with secrets management at scale and corporate IT security, including device management, endpoint hardening, email, and SaaS application security.
- Preferred experience includes incident response, DFIR, managed detection and response, LLM and agentic AI security, Zero Trust architectures, multi-tenant SaaS isolation, third-party integrations, SOC 2, ISO 27001, offensive security, red teaming, or cloud penetration testing.
- Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications are preferred.
About MOXFIVE
MOXFIVE is a cybersecurity services firm that helps organizations contain and recover from incidents and reduce future risk, pairing expert consultants with a proprietary incident-response platform. It delivers incident response, restoration after ransomware and destructive malware, incident management, and advisory for cyber claims/insurance; founded in 2019, the company is privately held and headquartered in McLean, Virginia.