Senior Infrastructure Cloud Security Engineer – AWS

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in establishing and defining the security posture for cloud and applications

• Facilitate cyber resilience and implement zero trust strategies

• Design, implement, and maintain security measures for cloud-based infrastructure, applications, and data

• Lead initiatives to enhance security, including IAM, network segmentation, PAM, workload protection, CI/CD integration, and container/Kubernetes security

• Assess and deploy both cloud-native and third-party security tools

• Monitor cloud security incidents and conduct prompt root cause analyses

• Advance the application security program, which encompasses security SDLC, code scanning, SCA, threat modeling, and penetration testing

• Collaborate with engineering leaders to incorporate security into product development roadmaps

• Create and enforce secure coding standards and educational programs for developers

• Provide hands-on code review and validation for applications deemed high-risk or high-impact

• Develop and enforce security policies, standards, and procedures to ensure compliance in cloud engineering

• Stay updated on emerging security trends, threats, and technologies to enhance security posture

• Offer guidance and training to internal teams regarding cloud and application security best practices

• Establish KPIs and metrics to ensure security is quantifiable and transparent

• Foster a culture of security across engineering, development, and product teams

⛳️ Requirements

• Bachelor’s degree in a technical discipline from an accredited institution, or equivalent professional experience

• A minimum of 8 years of industry and/or relevant experience, typically including 2+ years in an AVP-level position or an equivalent external role

• At least 7 years of direct and relevant work experience in cloud security engineering, application/product security, or a similar capacity

• Preferred security-focused certifications such as CISSP, CEH, GIAC, ISSAP, or CISM

• Knowledge of AWS and Azure cloud security principles and technologies

• Strong scripting and automation skills, including Python, PowerShell, and Terraform

• Understanding of Docker and Kubernetes security technologies

• Familiarity with infrastructure as code (IaC) tools

• Knowledge of encryption and key management practices

• Comprehensive understanding across security, insider threat, risk management, and compliance areas

• Proven ability to manage multiple deliverables independently in a fast-paced environment

• Exceptional risk-based problem-solving, analytical, and communication skills

• Capacity to work autonomously as well as collaboratively in a team

🏝️ Benefits

• Discretionary bonus eligibility for select positions

• Paid time off (PTO)

• Paid holidays

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Disability insurance

• 401K plan

• Additional training opportunities