Senior Security Engineer, Cloud Security

Role Overview

• Design, implement, and operate cloud security controls across production and internal environments (primarily AWS).
• Own cloud posture management workflows (risk-based triage, exception handling, and automated remediation).
• Build and maintain secure-by-default templates and modules (standards, defaults, account structure, secret management, segmentation).
• Embed policy-as-code and IaC security controls into CI/CD (PR checks, drift detection) to prevent misconfigurations.
• Reduce external and cloud risk by:
• Own attack surface discovery/governance and baseline edge protections (e.g., WAF/rate limiting).
• Drive automation for triage/remediation and operational efficiency by reducing repeat misconfigurations/toil (triage, routing, dedupe, validation, reporting).
• Standardize cloud logging/telemetry and ensure it integrates cleanly into detection/IR workflows.
• Work cross-functionally with Product, IT, DevOps, and Engineering to drive best practices and improve baseline security across the whole org.
• Create pragmatic documentation, runbooks, and enablement materials that help teams self-serve, safely.
• Support cloud/edge incident response: containment playbooks, root cause, and follow-up fixes.
• Lead design reviews and threat models for platform/infrastructure (networking/segmentation, service-to-service access, secrets/encryption, logging/monitoring).
• Drive continuous improvement of processes, procedures, and tools used across the security engineering organization.

Requirements

• 5+ years combined experience in software engineering, infrastructure/platform engineering, and/or security engineering (with meaningful cloud/platform depth).
• Strong understanding of securing distributed, cloud-native, high-availability environments.
• Hands-on AWS experience: designing and operating secure systems (networking, IAM boundaries, logging/monitoring, encryption, service architectures).
• Experience with Infrastructure-as-Code (Terraform preferred).
• Ability to build and maintain tools/automation (Python preferred; strong engineering fundamentals required), including working effectively in Git-based workflows (branching strategies, PRs/code review, CI/CD integration, and resolving merge conflicts).
• Experience in at least one of:
• External attack surface discovery/remediation, and/or
• Edge protection controls (e.g., WAF), and/or
• Cloud posture/misconfiguration reduction at scale.
• While very rare, this position may require occasional after-hours work to support incident response efforts and mission-critical security services.

Tech Stack

• AWS
• Cloud
• Python
• Terraform

Benefits

• 401(k) with Employer Contribution
• Health, Vision, and Dental Insurance
• Health Savings Account (HSA) available with Employer Contribution
• Employer Paid Life, Short-term, and Long-term Disability Insurance
• Generous PTO Plan and 16 paid holidays per year
• Retirement Savings Plan with Employer Contribution
• Employer Provided Private Health Insurance and Healthcare Cashplan
• Employer Paid Life Insurance and Income Replacement
• Generous Holiday Plan and 14 paid holidays per year