
Cloud Security Engineer
Hex Technologies5 months ago
Remote, United States +2 moreSenior
Base Salary
$200k - $265k/yr
Responsibilities
- Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters.
- Develop isolation and sandboxing methods for Hex’s RCE-as-a-Service platform.
- Build, deploy, and maintain secure infrastructure-as-code with Terraform.
- Conduct security assessments, threat modeling, and audits of AWS infrastructure and Kubernetes deployments.
- Embed security best practices into CI/CD pipelines in collaboration with development and operations teams.
- Monitor and respond to cloud security incidents, identify root causes, and recommend remediation actions.
- Provide expertise on cloud security compliance requirements including SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
- Mentor engineers and promote cloud security practices across the organization.
Requirements
- 5+ years of experience in cloud security engineering with extensive AWS expertise.
- Demonstrated proficiency in Kubernetes security, including cluster hardening, RBAC, network policies, and container vulnerability management.
- Expert-level knowledge and hands-on experience with Terraform.
- Familiarity with AWS security services including IAM, GuardDuty, Security Hub, CloudTrail, and WAF.
- Familiarity with CNAPP solutions such as Wiz and SIEM solutions such as Panther.
- Understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
- AWS Certified Security – Specialty, Certified Kubernetes Security Specialist, and Terraform Associate certifications are highly desirable.
- Security certifications from SANS or OffSec are a bonus.
- Strong problem-solving, communication, and leadership skills are required.
Benefits
- Equity is included in the total rewards package.
- Comprehensive health benefits are offered.
- Flexible paid time off is provided.
Tech Stack
Categories
About Hex Technologies
With Hex, anyone can explore data using natural language, with or without code, all on trusted context, in one AI-powered platform.