Senior Security Engineer - Cloud

Muon Space•San Jose, CA

5d•$193,000 - $218,000•Hybrid

About The Position

Muon is seeking a Senior Security Engineer to join its Security Engineering & IT team. This role independently protects the company’s infrastructure, data, and people, and advances security across endpoints, networks, multi-cloud environments (AWS, GCP, and Azure), and identity systems. The position contributes to compliance efforts, including CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. Cloud security is a core focus, including cloud security posture management, secure cloud architecture, and workload protection. The position is hybrid, with on-site work at the San Jose, California office three days per week, or may be fully remote from an approved U.S. location. It requires access to export-controlled information, so applicants must meet the stated U.S. export-control eligibility conditions. The salary range is $193,000–$218,000, plus an equity grant and benefits. Final compensation depends on skills, qualifications, experience, and geographic location.

Requirements

At least 5 years of experience in information security or security engineering roles.
Deep, hands-on cloud security experience across AWS and at least one of GCP or Azure, including IAM, VPC/networking, security groups, CloudTrail, GuardDuty, Config, and KMS.
Experience with cloud security posture management (CSPM) tooling and securing infrastructure-as-code and CI/CD pipelines.
Familiarity with container and workload security, including Kubernetes, serverless, and image scanning.
Experience with SIEM platforms such as Splunk, Sentinel, Elastic, or similar for log analysis and detection engineering.
Solid cloud networking knowledge, including firewalls, proxies, DNS security, network segmentation, and packet analysis.
Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001.
Excellent written and verbal communication skills, including the ability to convey risk and technical findings to engineers and leadership.
Must meet the stated eligibility conditions for access to export-controlled information.

Nice To Haves

Relevant cloud security certifications, such as AWS Security Specialty, GCP Professional Cloud Security Engineer, or Azure Security Engineer, or general security certifications such as CISSP or GIAC.
Experience with infrastructure-as-code security using Terraform or CloudFormation and CI/CD pipeline security.
Background in environments subject to ITAR/EAR export control requirements.

Responsibilities

Drive cloud security posture management across AWS, GCP, and Azure, including IAM policies, bucket security, security group and network reviews, and CloudTrail, GuardDuty, and Config monitoring.
Architect secure, scalable cloud environments, including landing zones, account and organization structures, network segmentation, encryption, and key management.
Secure cloud workloads and containers, including Kubernetes/EKS, serverless functions, and container image scanning.
Embed security into infrastructure-as-code and CI/CD pipelines using Terraform and CloudFormation, with automated policy and misconfiguration checks.
Manage cloud identity and access, including least-privilege roles, federation, and secrets management across cloud platforms.
Support CMMC Level 2 and NIST SP 800-171 compliance by maintaining SSP control narratives, collecting evidence, and preparing for assessments.
Contribute to security policy development and keep documentation current as the environment evolves.