Senior Security Engineer, Cloud Platforms (Remote)

eClinical Solutions helps life sciences organizations accelerate clinical development initiatives with expert data services and the elluminate Clinical Data Cloud. The Senior Security Engineer, Cloud Platforms is focused on securing AWS environments and SaaS platforms, contributing to cloud security strategy, and collaborating with various teams to ensure continuous protection and compliance.

Responsibilities:

• Implement and/or manage native AWS security services to monitor and protect multi account environments
• Develop and maintain Infrastructure as Code (IaC) security practices using Terraform
• Configure and optimize Web Application Firewalls (WAF) and API security controls
• Automate incident detection, response workflows, and compliance processes using native AWS services and integrated tooling
• Drive vulnerability management activities
• Shape the strategic roadmap for platform and cloud security, providing thought leadership and proactive recommendations to senior management
• Map and track cloud security maturity
• Perform regular security assessments using AWS frameworks, CIS Benchmarks, etc
• Lead data protection initiatives such as DLP, data flow mapping, encryption policies, etc
• Partner with platform engineering and product teams to embed security into design and delivery activities
• Coordinate security efforts with security operations, enterprise security, Governance, Risk, and Compliance (GRC), and privacy/compliance teams
• Advise AI/ML teams on securing models, data pipelines, and emerging AI security risks
• Lead security awareness efforts tailored for engineering teams, including building a security champions program to drive adoption of secure practices across product and cloud development
• Other duties as assigned

Requirements:

• 5+ years of hands-on cloud security engineering experience, specifically with AWS preferred
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline, or equivalent professional experience preferred
• Relevant certifications such as AWS Certified Security Specialty, CISSP, or similar preferred
• Able to translate complex cloud security risks or design choices into clear guidance for engineering or product teams
• Able to identify potential cloud security weaknesses proactively and design scalable mitigations
• Able to define, shape, and influence strategic security decisions and roadmaps
• Comfortable driving initiatives independently while influencing senior engineers and leaders
• Deep expertise in AWS security services (e.g., Security Hub, GuardDuty, AWS Config, Inspector, Macie)
• Proficiency with scripting languages (Python, Bash) to automate security controls and integrate with Infrastructure as Code workflows
• Experience configuring and managing AWS multi account strategies and network architectures (e.g., Control Tower, SCPs, Guardrails)
• Proven ability to deploy and optimize WAF and API hardening solutions
• Hands-on experience automating security incident response and compliance workflows
• Solid understanding of data security, including DLP and encryption standards
• Practical knowledge of vulnerability management at cloud scale and security scanning tools (DAST/SCA/AWS Inspector, Burp, etc)