Staff Cloud Security Engineer

• Lead the design, implementation, and continuous improvement of cloud security architectures across AWS environments, ensuring product security, and secure-by-design principles throughout the infrastructure and application lifecycle.
• Partner with Platform, and Cloud Engineering team to design, implement, and manage AWS-native security services including IAM, KMS, GuardDuty, Security Hub, Inspector, Macie, WAF, Shield, CloudTrail, Config, and CloudWatch for proactive threat detection and risk management.
• Develop and enforce cloud security standards, guardrails, and governance frameworks across AWS accounts, containers, Kubernetes/EKS, serverless, and hybrid cloud workloads.
• Automate security monitoring, compliance validation, vulnerability management, and incident response workflows using Infrastructure as Code (IaC), scripting, and cloud-native automation tools.
• Conduct cloud threat modeling, architecture risk assessments, and security reviews for AWS-hosted applications, APIs, infrastructure, and enterprise-integrated systems.
• Secure DevOps platforms and cloud-native application environments by implementing least-privilege access controls, secrets management, secure network segmentation, encryption, and workload protection.
• Manage and enhance continuous cloud security posture management (CSPM), container security, and runtime protection capabilities across AWS environments.
• Scope, coordinate, and review penetration testing, vulnerability assessments, and advanced security testing activities across cloud infrastructure, applications, and DevOps tooling.
• Serve as a cloud security subject matter expert during security incidents, forensic investigations, root cause analysis, and remediation activities.
• Partner with Engineering, Platform, Infrastructure, Compliance, and Product teams to align cloud security strategies with regulatory, privacy, and industry cybersecurity requirements.
• Define, track, and report cloud security metrics, operational KPIs, and compliance status to provide visibility into organizational security posture and risk trends.
• Mentor and guide engineers on AWS security best practices, DevSecOps methodologies, automation strategies, and secure cloud engineering principles to strengthen organizational security maturity at GRAIL.

Requirements

• 8+ years of experience in product security, cybersecurity, Cloud Security, application security, or related technical security roles.
• Hands-on experience leading threat modeling, security risk assessments, and vulnerability management for complex software products.
• Experience embedding security into modern software development environments, including CI/CD and DevSecOps practices.
• Experience supporting security incident response and conducting root cause analysis in production environments.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent practical experience.

Core Competencies

Demonstrates expertise in cloud security architecture, including the design and implementation of AWS-native security services and compliance frameworks. Proficient in automating security processes and mentoring teams on best practices in cloud security and DevSecOps.

Highest-signal resume keywords

• Cloud Security Architecture
• AWS Security Services
• Threat Modeling
• Vulnerability Management
• DevSecOps Practices

ATS Optimization Keywords

Hard Skills

• Cloud Security
• Product Security
• Cybersecurity
• Application Security
• Security Risk Assessment
• Incident Response
• Infrastructure as Code
• Scripting
• Continuous Security Posture Management
• Penetration Testing

Soft Skills

• Mentoring
• Collaboration
• Communication

Industry Keywords

• Cybersecurity Requirements
• Compliance
• Risk Management
• Secure-by-Design Principles
• Cloud-Native Automation

Tools & Technologies

• AWS
• IAM
• KMS
• GuardDuty
• Security Hub
• Inspector
• Macie
• WAF
• CloudTrail
• CloudWatch