Engineering Manager II, Cloud Security

This is a fully remote position, open to applicants in Texas.

📋 Description

• Lead and expand the Cloud Security team through recruitment, coaching, goal-setting, and overseeing roadmap execution.

• Establish cloud security architecture standards for AWS account organization, network segmentation, encryption, and Kubernetes workload isolation.

• Promote least privilege access for both human and machine identities, encompassing AWS SSO, role design, just-in-time access, and secrets management.

• Execute service control policies, admission control, CI policy-as-code checks, and secure Terraform modules.

• Develop cloud-resource and container-image posture assessments using Go and policy-as-code; prioritize and manage remediation efforts for identified issues.

• Create cloud-native detection in collaboration with SRE using CloudTrail, audit logs, and runtime signals; lead cloud incident response initiatives.

• Ensure security for CI/CD processes, artifact provenance, and deployment credentials.

• Collaborate with engineering teams on proposal evaluations and represent Cloud Security during SOC 2 and customer security assessments.

• Establish secure configurations as the standard through guardrails, paved-road modules, detection mechanisms, AI-assisted posture triage, access reviews, and alert management.

⛳️ Requirements

• Over 7 years of experience in security, infrastructure, or platform engineering within production cloud environments, including at least 2 years in a managerial or leadership role.

• Extensive practical knowledge of AWS security, including IAM and Organizations, VPC design, SOPS, logging, and handling of sensitive data services.

• Demonstrated experience with production Kubernetes security, including RBAC, network policies, admission control, workload identity, and container image hygiene.

• Proficiency in infrastructure-as-code (Terraform or similar) and a history of delivering guardrails adopted by engineering teams.

• Proven experience in building or scaling a cloud security function, or a significant component of one.

• Excellent written communication skills, covering architecture standards, incident post-mortems, and leadership risk summaries.

• Ability to assess impact through metrics such as exposure reduction and time-to-detect.

• Experience in fintech, real estate technology, or other regulated, high-liability sectors (Optional).

• Background in detection engineering or DFIR within cloud environments (Optional).

• Practical experience utilizing LLMs or agents in security workflows (Optional).

• Familiarity with AWS, Azure, GCP Vertex AI, Kubernetes, Terraform, Okta, NodeJS/TypeScript, MongoDB, ClickHouse, Grafana, and Go.

🏝️ Benefits

• Comprehensive health plans.

• 401k program.

• Commuter benefits.

• Professional development opportunities.

• Parental leave.

• Flexible time off policy.

• Robust online onboarding program to train new employees.

• Biweekly all-hands meetings.

• Internal virtual events to maintain employee connectivity.

• Flexible work arrangements, including fully remote positions and a hybrid option for those near the Austin office.