Cloud Security Engineer

Cloud Security Engineer

100% Remote

Required Tech/Experience (Manager won't consider candidates without the following):

1. Hands-on experience with AWS security tools (GuardDuty, CloudTrail, SecurityHub, etc.)
2. Strong experience leveraging Terraform for infrastructure and security controls
3. Experience with Wiz (Wiz.io)

Preferred Tech/Experience (Not required, but moves the candidate to the top of the list):

1. Multi-cloud experience (AWS, Azure, GCP)
2. Strong background in IAM, networking, and cloud security architecture

Typical Day to Day (Tasks & Responsibilities):

• Get into the weeds of cloud security engineering across AWS (and potentially Azure/GCP)
• Establish and enforce security baselines during infrastructure deployment
• Implement alerts, monitoring, and protections across cloud environments
• Partner with DevOps and Platform teams to embed security into infrastructure and CI/CD pipelines
• Identify vulnerabilities and drive remediation efforts
• Enhance cloud security posture through automation and infrastructure as code (Terraform)
• Contribute to overall cloud security architecture and best practices

Years' Experience/Degree Requirements/Certification:

• 5+ years of experience in cloud security engineering
• Strong technical background (this is not a GRC-focused role)
• Experience across AWS required; Azure/GCP exposure is a plus

Job Description:

Implement and optimize security controls for AWS cloud infrastructure through code.

Monitor and review application and infrastructure security posture, initiating remediation efforts with relevant teams.

Recommend new or revised security measures and countermeasures for current security challenges.

Collaborate with DevOps and Platform teams to ensure security considerations are embedded from the outset.

Identify, create, and implement security standards for CI/CD pipelines and infrastructure deployment automations.

Oversee the implementation and administration of logging and monitoring services to safeguard the security and integrity of applications.

Create and maintain system documentation, architecture diagrams, and online collaborative documentation (e.g., Wiki) with high quality.

Work on other security engineering initiatives such as streamlining vulnerability management and network architecture.

What you will bring to the team:

5+ years of demonstrable experience with AWS cloud security infrastructure and tools.

Experience with three or more of the following AWS services: GuardDuty, CloudTrail, CloudWatch, Inspector, SecurityHub, TrustedAdvisor, Config, ControlTower / GuardRails.

Experience using organizational cloud governance constructs (e.g., AWS Organizations including OUs and SCPs).

Strong understanding and experience with IAM, including roles and policies.

Strong understanding and experience with cloud access control & security mechanisms (e.g., ACL, Security Groups, VPCs).

Strong knowledge of application development, cloud networking concepts, systems engineering, and network engineering to develop security requirements and best practices, enterprise risk assessment methodologies.

Strong experience with Terraform.

Strong experience with Wiz.

Experience with CI/CD pipeline tooling (Artifactory/ECR, Github Actions)

Able to show initiative and translate business requirements and needs into technical, secure solutions.

Excellent communication skills with the ability to communicate complex security concepts clearly and concisely.

Experience with other cloud providers such as GCP, Azure, OC