Overview:The
Senior Cloud Security Engineer reduces material risk across large-scale AWS, Azure, and multi-cluster Kubernetes environments. This engineer operates and continuously improves our CSPM/CNAPP platform, investigates complex exposure paths, strengthens cloud security guardrails, and works with Cloud Operations, SRE, and engineering teams to drive remediation through closure.
This is also a builder role. You will use Python, APIs, infrastructure as code, and modern AI-assisted engineering tools to develop secure dashboards, integrations, automation, and analytical workflows. Success requires strong cloud security judgment, practical engineering ability, and the persistence to drive findings through remediation rather than simply reporting them.
What You'll Do- Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid infrastructure.
- Use CSPM/CNAPP telemetry to investigate vulnerabilities, misconfigurations, identity risks, exposure paths, and publicly accessible services.
- Validate and prioritize findings based on real-world risk, then work with infrastructure owners to drive remediation through closure.
- Develop secure dashboards, integrations, automation, and analytical workflows using APIs and modern AI-assisted engineering tools.
- Secure Kubernetes environments and containerized workloads across the software development lifecycle.
- Conduct security reviews of cloud architecture, infrastructure patterns, identities, network controls, and deployment pipelines.
- Build automation, guardrails, reporting, and repeatable processes that improve cloud security visibility and execution.
- Investigate cloud security incidents and support response, containment, and corrective action.
RequirementsWhat You Must Have- 7+ years of professional experience in security engineering, cloud engineering, infrastructure engineering, or a closely related technical role.
- 3+ years of direct, hands-on responsibility for securing production cloud environments, with depth in AWS or Azure and practical experience with the other.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical field.
- Hands-on experience operating an enterprise CSPM/CNAPP platform, such as Orca, Wiz, Prisma Cloud, or Microsoft Defender for Cloud, including tuning policy, investigating findings, prioritizing material risk, and driving remediation rather than simply consuming platform output.
- Experience building and shipping production-quality security tooling, automations, integrations, or dashboards using Python and APIs, supported by infrastructure as code and modern CI/CD practices. Candidates should be prepared to walk through something they built and explain their individual contribution.
- Strong command of cloud security fundamentals at scale in your primary cloud: IAM, network security, logging and detection, encryption and key management, and secure configuration.
- Hands-on experience securing production Kubernetes environments, including workload identity, network controls, secrets management, admission policies, image security, and runtime visibility.
- Demonstrated ability to use modern AI-assisted development tools to accelerate engineering work.
- Current AWS or Azure security or architecture certification, such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate or Professional, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Azure Solutions Architect Expert.
- Experience working directly with Cloud Operations, SRE, or engineering teams to drive remediation of cloud security risk.
Preferred Qualifications- Experience securing large, globally distributed or multi-cloud environments.
- Multiple cloud security or architecture certifications beyond the required minimum.
- Advanced experience implementing policy as code, automated cloud guardrails, and security controls within CI/CD pipelines.
BenefitsSalary range: $150,000-$180,000
- Fully paid medical, dental, and vision insurance (partial premium coverage for dependents)
- Employer quarterly contributions to 401k funds
- 15 days accrued vacation
- 11 paid holidays
- Bi-annual reviews, and annual pay increases
- Health and wellness benefits, including free gym membership
- Quarterly team-building event
