Cloud Security Engineer

This is a fully remote position, open to applicants in Argentina, +3 more countries.

📋 Description

• Manage and enhance CSPM, CNAPP, and DSPM tools within R2’s AWS environment

• Identify, prioritize, triage, and oversee the remediation of cloud security issues from start to finish

• Ensure there are no high-severity findings open for more than 30 days

• Implement and strengthen IAM controls, encryption, secrets management, and data protection across AWS accounts

• Take ownership of secrets rotation and access review processes for production systems

• Integrate security measures into CI/CD pipelines, including SAST/SCA/IaC scanning with blocking criteria for high-severity findings

• Automate security workflows using Python, Bash, Go, APIs, and Terraform/IaC

• Manage and enhance WAF rule sets, security groups, NACLs, and network segmentation across VPCs

• Adjust and maintain AWS WAF rate-limiting thresholds and oversee rule groups against scanning and malicious traffic

• Enforce least-privilege network access across different accounts and environments

• Contribute to the security of GenAI applications, RAG architectures, agents, APIs, connectors, and MCP servers

• Design and create internal AI/LLM-based security agents for threat detection, finding triage, and incident response

• Establish controls to prevent data leakage, improper access, prompt injection, and unsafe tool use by autonomous agents

• Collaborate with the SOC on alert integration and the development of SIEM use cases

• Create and maintain security documentation, runbooks, and standards

• Assist with incident response, root cause analysis, and remediation in production environments

• Report to the Director of Infrastructure and closely partner with Security, Infrastructure, and Platform Engineering teams

⛳️ Requirements

• 3–5 years of experience in cloud security, DevSecOps, or a related role

• Practical experience with CSPM/CNAPP/DSPM platforms such as Wiz, Prisma Cloud, Orca, or similar

• In-depth knowledge of AWS security (IAM, KMS, Secrets Manager, Security Hub, GuardDuty, Inspector)

• Experience integrating security into CI/CD pipelines and Infrastructure as Code (Terraform)

• Proficient scripting skills (Python, Bash; Go is a plus) for security automation via APIs

• Familiarity with Kubernetes/EKS and container security practices

• Experience in fortifying network security controls (WAF, security groups, NACLs, VPC segmentation)

• Understanding of GenAI/LLM security threats (prompt injection, agentic tool misuse, data leakage)

• Proficient in English—both written and spoken (required)

• AWS Certified Security – Specialty (preferred)

• Experience with SIEM/SOAR platforms (preferred)

• Familiarity with ISO 27001, SOC 2, or other compliance frameworks (preferred)

• Experience in fintech or regulated industries (preferred)

🏝️ Benefits

• Eligible team members can participate in R2’s Phantom Share Program, a performance-based incentive

• Opportunity to join a high-impact, mission-driven fintech

• Ownership and influence within a fast-paced, growth-oriented startup

• Cross-functional collaboration with exceptional teams

• Exposure to complex regulatory challenges and innovation in embedded finance