Senior Cloud Security Engineer

This is a fully remote position, open to applicants in Colombia, +1 more country.

📋 Description

• Oversee daily security operations

• Assist in the execution of the company's compliance initiatives

• Act as the primary security contact for the organization in a single-coverage capacity

• Collaborate closely with the small DevOps team, receiving support for implementation

• Engage in hands-on cloud security engineering within an AWS-centric infrastructure

• Evaluate security alerts and respond to incidents in the cloud environment

• Execute Terraform changes via pull requests

• Implement Kubernetes security protocols, including RBAC and workload hardening

• Oversee vulnerability scanning, prioritization, and the coordination of remediation efforts

• Facilitate SOC 2 audits by supplying control evidence and liaising with auditors

• Address security concerns related to CI/CD and software supply chains

⛳️ Requirements

• Applicants must reside in Colombia or Costa Rica

• Practical experience in AWS security, including IAM and least-privilege design, GuardDuty, Security Hub, and CloudTrail

• Proficiency in security alert triage and incident response within cloud environments

• Familiarity with Terraform and the process of submitting changes through pull requests

• Understanding of Kubernetes security basics, such as RBAC and workload hardening

• Expertise in vulnerability management, including scanning, prioritization, and coordinating remediation with engineers

• Experience in supporting SOC 2 audits, providing control evidence, and collaborating with auditors

• Awareness of CI/CD and supply-chain security, including GitHub Actions and dependency/image scanning

• Preferred: Experience with CrowdStrike Falcon administration, including endpoint and cloud/container sensors

• Preferred: Exposure to CMMC, NIST 800-171, GCC High, or FedRAMP

• Preferred: Knowledge of Azure security, including Microsoft Defender, ACR, and Azure DevOps

• Preferred: Familiarity with Cloudflare Zero Trust (WARP) and WAF

• Preferred: Experience in building Golden images/AMIs using Packer

• Preferred: Python scripting skills for security automation

• Comfortable working alongside AI coding agents

🏝️ Benefits

• Flexible remote work option

• Full-time employment status