Cloud Security Engineer

Magnit

1d•$80,000 - $86,000

About The Position

We're hiring a Cloud Security Engineer to strengthen the security posture of our multi-cloud environment and serve as a trusted technical advisor across engineering, SOC, and executive stakeholders. You'll lead threat modeling and attack-path analysis across AWS and Azure, tune AI-driven detections, and translate complex security findings into clear, prioritized remediation plans. This is a high-impact role for someone who can move fluently between deep technical analysis and executive-level communication.

Requirements

2+ years of hands-on cloud security experience across AWS and/or Azure (hybrid cloud environments a plus).
Demonstrated experience with threat modeling, attack-path analysis, and security architecture reviews.
Working knowledge of MITRE ATT&CK, CIS Critical Security Controls, and the NIST Cybersecurity Framework.
Experience with AI-driven or behavioral anomaly detection platforms (Darktrace, Vectra, ExtraHop, or similar).
Strong grasp of IAM fundamentals: least privilege, zero-trust architecture, and RBAC.
Ability to translate technical findings into prioritized, business-aligned recommendations for executive audiences.

Nice To Haves

Cloud certifications such as AWS Cloud Practitioner (or higher) and Azure Fundamentals (AZ-900) or above.
Vendor-specific detection or analyst certifications (e.g., Darktrace Cyber Analyst).
Exposure to privacy and compliance frameworks (CPRA, CPA, VCDPA, GDPR) and tools like OneTrust.
Experience working with regulated enterprise customers or in a customer-facing technical role.
Familiarity with threat intelligence enrichment tools (VirusTotal or equivalent).
Bachelor's degree in Information Security, Computer Science, Information Management, or equivalent practical experience.

Responsibilities

Conduct security architecture reviews and discovery sessions across enterprise AWS and Azure environments to identify control gaps and validate the effectiveness of existing controls.
Perform threat modeling and attack-path analysis, mapping adversarial behavior to MITRE ATT&CK and CIS Critical Security Controls to surface lateral movement, credential abuse, and insider threat risks.
Tune AI-driven anomaly detection and behavioral analytics models to reduce false positives and improve triage accuracy for the SOC.
Partner with Solutions Architects, Cloud Engineering, and Application Security teams to design secure deployment patterns aligned to enterprise compliance and risk requirements.
Deliver evidence-based findings and security briefings to both technical audiences (SOC analysts, engineers) and executive stakeholders.
Resolve complex multi-cloud security escalations end-to-end, partnering across cloud engineering and customer security teams.
Translate recurring control gaps into actionable feedback that influences platform security roadmaps and expands coverage across regulated environments.