Cloud Security Engineer

Job Description

Job Description

Position Title:

Cloud Security Engineer

Remote/Onsite : 100% Remote

Required Tech/Experience (Manager won’t consider candidates without the following):

1. Hands-on experience with AWS security tools (GuardDuty, CloudTrail, SecurityHub, etc.)
2. Strong experience leveraging Terraform for infrastructure and security controls
3. Experience with Wiz (Wiz.io)

Preferred Tech/Experience (Not required, but moves the candidate to the top of the list):

1. Multi-cloud experience (AWS, Azure, GCP)
2. Strong background in IAM, networking, and cloud security architecture

Typical Day to Day (Tasks & Responsibilities):

• Get into the weeds of cloud security engineering across AWS (and potentially Azure/GCP)
• Establish and enforce security baselines during infrastructure deployment
• Implement alerts, monitoring, and protections across cloud environments
• Partner with DevOps and Platform teams to embed security into infrastructure and CI/CD pipelines
• Identify vulnerabilities and drive remediation efforts
• Enhance cloud security posture through automation and infrastructure as code (Terraform)
• Contribute to overall cloud security architecture and best practices

Years’ Experience/Degree Requirements/Certification:

• 5+ years of experience in cloud security engineering
• Strong technical background (this is not a GRC-focused role)
• Experience across AWS required; Azure/GCP exposure is a plus

Job Description:

● Implement and optimize security controls for AWS cloud infrastructure through code.

● Monitor and review application and infrastructure security posture, initiating remediation

efforts with relevant teams.

● Recommend new or revised security measures and countermeasures for current

security challenges.

● Collaborate with DevOps and Platform teams to ensure security considerations are

embedded from the outset.

● Identify, create, and implement security standards for CI/CD pipelines and infrastructure

deployment automations.

● Oversee the implementation and administration of logging and monitoring services to

safeguard the security and integrity of applications.

● Create and maintain system documentation, architecture diagrams, and online

collaborative documentation (e.g., Wiki) with high quality.

● Work on other security engineering initiatives such as streamlining vulnerability

management and network architecture.

What you will bring to the team:

● 5+ years of demonstrable experience with AWS cloud security infrastructure and tools.

● Experience with three or more of the following AWS services: GuardDuty, CloudTrail,

CloudWatch, Inspector, SecurityHub, TrustedAdvisor, Config, ControlTower / GuardRails.

● Experience using organizational cloud governance constructs (e.g., AWS Organizations

including OUs and SCPs).

● Strong understanding and experience with IAM, including roles and policies.

● Strong understanding and experience with cloud access control & security mechanisms

(e.g., ACL, Security Groups, VPCs).

● Strong knowledge of application development, cloud networking concepts, systems

engineering, and network engineering to develop security requirements and best

practices, enterprise risk assessment methodologies

● Strong experience with Terraform.

● Strong experience with Wiz.

● Experience with CI/CD pipeline tooling (Artifactory/ECR, Github Actions)

● Able to show initiative and translate business requirements and needs into technical,

secure solutions.

● Excellent communication skills with the ability to communicate complex security

concepts clearly and concisely

● Experience with other cloud providers such as GCP, Azure, OC