Cloud Security Software Engineer

First Due provides software solutions for fire and EMS agencies. The Cloud Security Software Engineer builds autonomous, production-ready AI tools and agent-driven workflows for the company’s cloud security solutions, including triage, investigation, reporting, and threat intelligence.

Responsibilities:

• You will be the fast‑pace integrator behind the Cloud Security Plane of our solutions
• As an example of our project scale, you will build out agent-driven workflows for platforms like a FedRAMP High Cloud-Native SIEM and Tier 1 Agentic SOC
• You will build around standards that may be new to you such as the AWS Well-Architected Framework (Security Pillar) and NIST SP 800‑53 / NIST SP 800‑171 security controls
• Triage Agents that ingest, enrich, deduplicate, and disposition massive volumes of data around the clock
• Investigation Agents that execute multi-step, read-only investigations via governed tool interfaces and assemble comprehensive evidence bundles
• Reporting & Threat Intel Agents that autonomously fetch, normalize, and draft operational reporting from system ledgers

Requirements:

• U.S. citizenship required
• Active Secret clearance required or previously held Secret clearance with eligibility to obtain/reinstate US Secret
• Strong programming foundation in Python, Go, or TypeScript, with the ability to build production-grade systems rather than one-off scripts
• Demonstrated AI/LLM experience, including autonomous agents, local model frameworks, or advanced coding-assistant workflows (Aider, agentic CLIs, MCP-based tooling)
• Ability to translate complex systems requirements (architecture docs, security control catalogs, vendor specifications) into functional autonomous AI tools
• Understanding of cloud-native security concepts, including identity, logging pipelines, least-privilege design, and secure API interaction
• Familiarity with agentic patterns, including tool-use orchestration, multi-step reasoning, prompt-injection resilience, and autonomous workflow design
• Strong reasoning and debugging skills for benchmarking agent precision, reducing false positives, and validating autonomous behavior at scale
• Comfort operating in high-velocity, high-accountability environments where you ship frequently and own the autonomous actions your code performs
• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
• Ability to obtain Security+ within the first year
• Demonstrated skills with FedRAMP iridium baseline FedRAMP-I
• All applicants must be authorized to work for any US employer in the United States
• Locality Media LLC is unable to sponsor or transition sponsorship ownership of employment visas at this time
• Exposure to cloud security frameworks:
  • NIST SP 800‑53
  • NIST SP 800-318
  • NIST SP 800‑171
  • FedRAMP High
  • SOC 2, Type II and Type IV
  • CIS Benchmarks
  • OWASP
• Experience with AWS security and observability tooling (CloudWatch, Security Hub, IAM, event-driven architectures)
• Experience with infrastructure-as-code (Terraform, Ansible) or cloud-native automation pipelines
• Familiarity with SIEM/SOC workflows, log ingestion patterns, enrichment pipelines, and evidence-bundle generation
• Experience designing or consuming secure tool interfaces (Model Context Protocol, governed API layers, secure data-lake access patterns)
• Contributions to open-source AI projects, personal agentic labs, or published research demonstrating autonomous-systems thinking
• Understanding of Zero Trust, secure software development practices, and cloud-native threat modeling