Cloud Security Engineer
About The Position
The Cloud Security Engineer designs, implements, and maintains security controls across AWS cloud environments. The role safeguards cloud workloads through sound identity management, monitoring, threat detection, and secure operations, and develops secure AWS architectures using services such as IAM, KMS, CloudTrail, and Config, along with monitoring tools such as Sentry and Datadog. The position establishes centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices. It ensures AWS environments align with applicable frameworks and requirements, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2. The engineer also supports incident detection, investigation, and response; maintains audit trails across AWS accounts and services; automates security controls and compliance checks with Infrastructure as Code; and integrates security into CI/CD pipelines in collaboration with engineering teams. The role also supports deployment automation, build troubleshooting, release coordination, and developer enablement. This includes validating account handoffs, reviewing pipeline configurations, verifying secrets, supporting deployment dry runs, and assisting with cutover and rollback planning.
Requirements
- U.S. citizenship or a Green Card, and the ability to obtain a Public Trust clearance.
- Bachelor’s degree in computer science, cybersecurity, engineering, or a related field; four additional years of relevant experience may substitute for the degree.
- At least 6 years of relevant experience in cloud security, cybersecurity, and AWS security.
- Strong knowledge of AWS services, including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS.
- Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
- Hands-on experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
- Strong scripting or development experience with Python, Bash, or similar languages.
- Ability to work independently and collaborate with cross-functional teams to solve complex security, operational, and reliability challenges.
Nice To Haves
- AWS Certified Security – Specialty certification (highly desirable).
- AWS Certified Solutions Architect or DevOps Engineer certification.
- CISSP, CISM, or GIAC certification.
Responsibilities
- Design, implement, and maintain security controls across AWS cloud environments.
- Safeguard cloud workloads using best practices for identity management, monitoring, threat detection, and secure operations.
- Develop secure AWS architectures using services such as IAM, KMS, CloudTrail, and Config, plus monitoring tools such as Sentry and Datadog.
- Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices.
- Ensure AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2.
- Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services.
- Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation.
- Integrate security into CI/CD pipelines and collaborate with engineering teams on secure build and deployment processes.
- Support deployment automation, build troubleshooting, release coordination, and developer enablement.
- Validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
Benefits
- Medical, prescription drug, dental, and vision insurance.
- Personal and family sick time and company-paid holidays.
- Parental leave.
- 401(k) retirement plan.
- Group term life insurance and travel assistance.
- Voluntary life and AD&D insurance.
- Health Savings Account and health care and dependent care Flexible Spending Accounts.
- Transit and parking commuter benefits.
- Short-term and long-term disability.
- Tuition reimbursement, personal development, certifications, and learning opportunities.
- Employee referral program.
- Corporate-sponsored events and community outreach.
- Annual Care.com membership.
- Employee Assistance Program.
- Supplemental benefits through Corestream, including critical care, hospital indemnity, accident insurance, legal assistance, and identity theft protection.
- Position may be eligible for a discretionary variable incentive bonus.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
