Review RFCs and partner with engineering teams on architectural decisions that have security implications
Design and build internal security systems end to end, including roadmap areas such as web application firewalls and vulnerability risk management tooling
Harden and improve security-related production software components as opportunities for better resilience and protection are identified
Partner with Compliance to translate FedRAMP, SOC 2, Texas RAMP, ISO 27001, and CJIS requirements into practical technical controls
Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint
Contribute to authentication and identity systems across cloud and corporate environments, including SSO and SCIM implementations
Participate in the security team’s on-call rotation
Requirements
5+ years of experience in cloud security, platform security, infrastructure security, or a related security-focused engineering role
Strong experience working in AWS, ideally in multi-tenant cloud environments
Strong coding ability and comfort building and maintaining tooling in languages such as Python or Go
Experience reviewing system designs and RFCs and providing clear, actionable security guidance
Working knowledge of SIEM, vulnerability management, and related security tooling
Comfort operating across both technical design and hands-on implementation in a role that spans both strategy and execution