Senior Cloud Security Engineer

2 months ago

Responsibilities

Design, build, and maintain cloud security controls across AWS/GCP infrastructure, Kubernetes, and serverless environments.
Implement fine-grained IAM policies, least-privilege access models, and automated secrets management.
Integrate SAST, DAST, and container vulnerability scanning into CI/CD pipelines.
Lead network security hardening involving VPC architecture, security groups, and cloud monitoring and alerting.
Operationalize vulnerability management and threat modeling for cloud-native applications and AI-driven workflows.
Partner with engineering teams on secure development practices and securing AI agent architectures.
Drive security programs from requirements through implementation, review, measurement, and remediation.

Require 5+ years of experience in cloud security engineering, infrastructure security, or DevSecOps within a modern SaaS environment.
Require deep proficiency with AWS and/or GCP, including networking, IAM, and managed services.
Require experience with Infrastructure as Code using Terraform or CloudFormation and security automation in CI/CD pipelines.
Require strong understanding of container security and orchestration platforms such as Kubernetes, EKS, or GKE.
Require strong coding skills in Python, Go, or a similar language for security automation and cloud API interaction.
Require the ability to identify and prioritize material risks, communicate clearly across technical and non-technical teams, and independently drive programs to completion.
Preferred qualifications include experience with Vanta, Drata, SOC 2 Type I/II, SOC 3, ISO 27001, vendor risk management, privacy operations, data governance, endpoint or identity lifecycle management, secure SDLC, application security reviews, and vulnerability management.

11-50 employees