Cloud Security Engineer

Latacora is hiring a Cloud Security Engineer to secure and improve cloud and SaaS security posture for a portfolio of clients. The role involves operating and extending its security platform, identifying and reporting security issues, and advising client engineering teams on infrastructure and service configuration.

Responsibilities:

• Review cloud architectures across AWS, GCP, and Azure to provide expert guidance on practical controls and structure
• Assess and advise on SaaS configuration and identify posture across services such as Okta, GitHub, and Google Workspace
• Triage and evaluate security findings to identify issues with real risk. Proactively report those issues to clients
• Coordinate with Latacora’s application security, infrastructure security, detection and response, corporate security, and risk and compliance specialists when work crosses disciplines
• Run, maintain, and extend Latacora’s internal tooling for continually monitoring and evaluating client cloud and Saas environments

Requirements:

• Meaningful depth in cloud security with working knowledge of at least one of AWS, GCP, or Azure with the ability to get up to speed on the others
• Comfort with writing and maintaining code
• you'll need the ability to read, modify, and write code to be successful
• Experience with SaaS security administration, particularly identity providers, source control, and productivity suites as well as an understanding of how their configuration and integration surfaces create risk
• Familiarity with modern engineering practices such as infrastructure as code, CI/CD, containers, K8s, APIs, and centralized logging
• Judgment about severity and prioritization
• You'll know why and have the ability communicate which findings need attention this week versus next quarter