Cloud Security Engineer
About The Position
The Cloud Security Engineer designs, implements, and maintains security controls across AWS environments. The role safeguards cloud workloads through best practices for identity management, monitoring, threat detection, and secure operations, and develops secure AWS architectures using services such as IAM, KMS, CloudTrail, and Config, along with monitoring tools such as Sentry and Datadog. The position implements centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices. It ensures AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2. The engineer supports incident detection, investigation, and response while maintaining audit trails across AWS accounts and services. The role automates security controls and compliance checks with Infrastructure as Code tools such as Terraform and CloudFormation, integrates security into CI/CD pipelines, and collaborates with engineering teams to support secure build and deployment processes. It also involves supporting deployment automation, troubleshooting, release coordination, developer enablement, account handoffs, pipeline reviews, secret verification, deployment dry runs, and cutover and rollback planning.
Requirements
- U.S. citizenship or Green Card, and ability to obtain a Public Trust clearance.
- Bachelor’s degree in computer science, cybersecurity, engineering, or a related field; four additional years of relevant experience may substitute for a degree.
- At least 6 years of relevant experience in cloud security, cybersecurity, and AWS security.
- Strong knowledge of AWS services, including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS.
- Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
- Hands-on experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
- Strong scripting or development experience with Python, Bash, or similar languages.
- Ability to work independently and collaborate with cross-functional teams.
Nice To Haves
- AWS Certified Security – Specialty certification (highly desirable).
- AWS Certified Solutions Architect or DevOps Engineer certification.
- CISSP, CISM, or GIAC certification.
Responsibilities
- Design, implement, and maintain security controls across AWS cloud environments.
- Safeguard cloud workloads by applying best practices for identity management, monitoring, threat detection, and secure operations.
- Develop secure AWS architectures using services such as IAM, KMS, CloudTrail, and Config, and monitoring tools such as Sentry and Datadog.
- Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices.
- Ensure AWS environments align with applicable frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2.
- Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services.
- Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation.
- Integrate security into CI/CD pipelines and collaborate with engineering teams on secure build and deployment processes.
- Support deployment automation, build troubleshooting, release coordination, and developer enablement.
- Validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
- Work independently and collaborate with cross-functional teams to solve security, operational, and reliability challenges.
Benefits
- Medical, prescription drug, dental, and vision insurance
- Personal and family sick time
- Company-paid holidays
- Parental leave
- 401(k) retirement plan
- Group term life and travel assistance
- Voluntary life and AD&D insurance
- Health savings account
- Health care and dependent care flexible spending accounts
- Transit and parking commuter benefits
- Short-term and long-term disability
- Tuition reimbursement
- Personal development, certifications, and learning opportunities
- Employee referral program
- Corporate-sponsored events and community outreach
- Care.com annual membership
- Employee assistance program
- Supplemental benefits, including critical care, hospital indemnity, accident insurance, legal assistance, and identity theft protection
- Position may be eligible for a discretionary variable incentive bonus
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
