Staff Cloud Security Engineer

This is a fully remote position, open to applicants in Kentucky.

📋 Description

• Take ownership of the CrowdStrike Falcon configuration, ensuring that policies are accurately scoped, optimized, and producing actionable alerts.

• Collaborate with MDR to establish alert routing, triage thresholds, and escalation procedures.

• Oversee the monitoring of cloud environments (mainly AWS) to identify security posture deviations.

• Safeguard Kubernetes clusters and containerized applications.

• Create and implement cloud security policies and standards for AWS infrastructure.

• Assess and lead the deployment of supplementary detection tools.

• Administer infrastructure as code (IaC) security using Terraform or OpenTofu.

• Streamline security posture evaluations and detection workflows through automation with Python and shell scripting.

• Remain updated on the changing landscape of cloud threats.

⛳️ Requirements

• At least 8 years of experience in cloud security, security engineering, or a related field in infrastructure security.

• Practical experience with a cloud security posture management (CSPM) platform such as CrowdStrike, Wiz, Prisma Cloud, Orca, or similar alternatives.

• In-depth knowledge of AWS security architecture, including IAM/SCP policy design, VPC networking, security groups, CloudTrail, and cloud-native security measures.

• Competence in infrastructure as code (IaC) tools like Terraform, OpenTofu, or CloudFormation.

• Strong skills in Python and shell scripting for automating security processes, developing detection rules, and integrating tools.

• Must be a U.S. Citizen or a legal permanent resident (Xometry manages ITAR-controlled data).

🏝️ Benefits

• 401(k) matching

• Medical, dental, and vision insurance

• Life and disability insurance

• Generous paid time off, including vacation, sick leave, floating and fixed holidays, as well as maternity and bonding leave

• Employee Assistance Program (EAP) and various wellbeing resources

• Competitive benefits package