Senior Software Engineer, Cloud Security

Iambic Therapeutics, Inc•Boston, MA

6d•$168,000 - $210,000•Hybrid

About The Position

We are seeking a talented and motivated Cloud Security Engineer to join the tightly integrated technology and drug discovery operation at Iambic Therapeutics. You’ll work in the Software organization and work closely with the IT organization to help develop, maintain and govern security for our software projects and associated cloud service configuration. You will also work with teams developing and deploying Computational Science applications and Machine Learning models. Key responsibilities will be to help develop, improve and govern ISO 27001 compliant processes. This will also include supporting development and deployment of application/service and cloud service auth strategies. This position will be hybrid in our Boston office, with exceptions for experienced candidates to work remotely on the East Coast.

Requirements

10+ years of relevant experience with a Bachelor’s degree; or 8 years and a Master’s degree; or equivalent experience.
Strong software and cloud skills in Python, Ansible, AWS and Terraform.
Experience with Compliance frameworks (e.g. ISO 27001).
Experience with AWS IAM roles and policy management.
Experience with CI/CD tools (e.g., GitHub Actions, Jenkins, GitLab CI).
Experience with container/orchestration (Docker, Kubernetes/EKS).
Ability to address security concerns (drive security solutions or negotiate trade-offs) with a variety of teams including IT, Computational Scientists, Software Developers, Cloud Ops and ML engineers.

Responsibilities

Improve the security of cloud architecture across our AWS environments.
Embed security into the software development life cycle (SDLC).
Implement and manage security tooling.
Partner with engineering teams to remediate vulnerabilities and reduce risk.
Integrate security into CI/CD pipelines and developer workflows.
Build automated security checks, policy-as-code, and guardrails.
Enable “shift-left” security practices across engineering teams.
Design, update and enforce least-privilege access models across infrastructure and applications.
Establish logging, monitoring, and alerting for both infrastructure and application layers.
Lead response to cloud and application security incidents.
Conduct root cause analysis and drive systemic improvements.
Ensure systems meet regulatory requirements (ISO 27001).
Define policies for secure development and cloud usage.
Support audits and continuous compliance initiatives.
Mentor engineers on both cloud and application security practices.