Senior Cloud Platform Security Engineer

Senior Cloud Platform Security Engineer Location: Arlington, VA or Richmond, VA Schedule: Monday‑Thursday in office; Friday remote work. Overview CoStar Group is a leading global provider of real‑estate information, analytics, and marketplaces. In this role, you will build and operate centralized security controls that protect our web applications across AWS, GCP, Azure, Kubernetes, and AI‑powered features. Responsibilities Cloud Security and Guardrails Enforce security posture across AWS, GCP, Azure using SCPs, organization policies, IAM guardrails, and detective controls (Wiz, native cloud services). Create detection patterns and escalation paths with incident response teams. Validate and enforce security practices for acquisitions and new environments. Kubernetes Platform Security Lead workload protection strategy for EKS clusters—runtime monitoring, admission control, network policy, and secrets management. Validate sensor coverage, incident response readiness, and scalable guardrails. AI and Agentic System Security Partner with product engineering to secure AI‑powered features, MCP server implementations, and agentic workflows. Lead threat modeling for new AI surfaces; build guardrails and detection patterns for prompt injection and unauthorized tool use. Security Automation Integrate automated scanning tools into CI/CD pipelines. Implement IaC solutions and drive automated remediation processes. Mentorship & Collaboration Work closely with product dev teams to provide feedback on secure coding practices. Proactively guide teams on risk remediation. Basic Qualifications Bachelor’s degree (Computer Science, Cybersecurity, or related field). 6+ years of security engineering experience with depth in at least one of: cloud-native environments (AWS preferred), Kubernetes platform hardening or monitoring, CI/CD pipelines, IaC, software supply chain security. Track record of taking security initiatives from scoping through production rollout and operational ownership. Author scripts or IaC (Python, PowerShell, Ansible, CloudFormation, Terraform, etc.). Experience securing AI‑powered applications, threat modeling for LLM‑based features, MCP server implementations, or agentic systems. Experience in a mature CI/CD environment. Passion for solving complex challenges and innovating. Preferred Qualifications and Skills Self‑starter who can advance the platform security program and see initiatives through completion. Knowledge of tools such as AWS GuardDuty, Security Hub, EKS, OPA/Gatekeeper, Falco, Wiz, Datadog, Prisma Cloud, Orca, Upwind, Snyk, etc. Familiarity with software supply chain security, SBOM generation, dependency vulnerability management, build provenance, and artifact signing. Knowledge of infrastructure operations across databases, network, and system administration. Effective use of AI tools as a force multiplier for engineering work. Ability to communicate risk to leadership and drive risk remediation urgency. Familiarity with zero‑trust principles and cloud‑native access controls. Mentoring experience for team members prioritizing security efforts. Hands‑on experience implementing security tools into CI/CD pipelines and testing serverless cloud deployments. Benefits Competitive compensation and performance‑based incentives. Health benefits: Comprehensive medical, vision, dental, prescription drug, life, legal, and supplementary insurance. Virtual and in‑person mental health counseling services. Commuter and parking benefits. 401(k) retirement plan with matching contributions. Employee stock purchase plan. Paid time off. Tuition reimbursement and internal training opportunities. On‑site fitness center (or reimbursed membership) with yoga, Peloton, personal training, and group classes. Access to Employee Resource Groups. Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and healthy snacks. EEO Statement CoStar Group is an Equal Employment Opportunity Employer; we maintain a drug‑free workplace and perform pre‑employment substance abuse testing. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. CoStar Group is also committed to compliance with all fair employment practices regarding citizenship and immigration status. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation for accessing this application portal or the application process. Application Note CoStar Group is not able to provide visa sponsorship for this position. #J-18808-Ljbffr CoStar Group, Inc.