Cloud Security Engineer II

Job Summary

To enhance cloud security practices, the full-time Cloud Security Engineer II will design and implement security controls, automate security processes, and collaborate with DevOps teams, primarily focusing on AWS while also engaging with Azure and GCP, in a remote or onsite capacity in Needham, MA.

Key responsibilities

• Design, deploy, and enforce scalable cloud security controls and policies across multi-account AWS environments
• Embed automated security tools into CI/CD pipelines to identify vulnerabilities before deployment
• Develop automated detection and remediation workflows using scripting languages and Infrastructure as Code tools

Required qualifications

• 3-5 years of hands-on experience in cloud security, DevSecOps, or infrastructure security engineering
• Deep knowledge of core AWS security services such as IAM, GuardDuty, and Security Hub
• Strong proficiency in Infrastructure as Code (Terraform preferred) and at least one scripting language (Python, Go, or Bash)
• Practical experience securing Kubernetes/EKS and configuring CI/CD security scanners
• Familiarity with cloud controls mapping to industry frameworks like CIS Benchmarks and SOC 2