Senior Software Engineer II, Cloud Security

This is a fully remote position, open to applicants in Texas.

📋 Description

• Design and implement AWS account structures, IAM roles, permission boundaries, network segmentation, and KMS utilization through Terraform and Go.

• Secure Kubernetes environments by applying admission policies, RBAC, network policies, workload identity, runtime controls, and maintaining patched minimal container images.

• Create hardened, reusable Infrastructure as Code (IaC) modules and establish Continuous Integration (CI) policy checks.

• Develop and optimize cloud detection mechanisms using CloudTrail, Kubernetes audit logs, and runtime signals; design Go services and pipelines that integrate with the SIEM.

• Implement just-in-time access, short-lived credentials, and manage secrets effectively.

• Construct and manage Go-based posture checks across AWS accounts and container images; automate recurring remediation tasks.

• Investigate cloud alerts and address the infrastructure aspect of incidents.

• Review infrastructure pull requests and design proposals thoroughly.

• Collaborate with SRE and product engineers to implement necessary fixes.

• Partner with the Cloud Security engineering manager, alongside SRE, Platform, Application Security, and InfoSec teams.

⛳️ Requirements

• Over 6 years of experience in cloud security, infrastructure, SRE, or platform engineering, including a minimum of 3 years specifically focused on securing production cloud environments.

• Extensive hands-on experience with AWS: IAM policy evaluation, Organizations, VPC and private connectivity, KMS, CloudTrail, GuardDuty, or equivalent services.

• Proficient in production Kubernetes security, including RBAC, admission control, network policy, pod security, and authentication methods for workloads accessing cloud APIs.

• Strong experience with Terraform or similar IaC tools; capable of writing and reviewing modules and establishing guardrails.

• Programming experience in a production environment; proficiency in Go is preferred, with knowledge of Python or TypeScript being acceptable if willing to work in Go.

• Ability to articulate attacker pathways from leaked credentials or compromised pods to sensitive data, alongside detection strategies.

• Clear and direct technical writing skills.

• Experience in fintech, real estate tech, or other regulated, high-liability domains (Optional).

• Background in cloud penetration testing, red teaming, or Digital Forensics and Incident Response (DFIR) (Optional).

• Familiarity with supply chain security practices, including artifact signing, SBOMs, and SLSA-style provenance in CI/CD (Optional).

• Contributions to open source security tools, published research, or conference presentations (Optional).

• Experience with AWS, Azure, Kubernetes, Okta, NodeJS/TypeScript, MongoDB, ClickHouse, Grafana, and Go security tools.

🏝️ Benefits

• Comprehensive health plans.

• 401k program.

• Commuter benefits.

• Opportunities for professional development.

• Parental leave.

• Flexible time-off policy.

• Robust online onboarding program.

• Biweekly all-hands meetings.

• Internal virtual events.

• Flexible remote-first work arrangements.

• Hybrid option available for those residing near the Austin office.