Security Engineer for Cloud Infrastructure

Job Summary

To secure cloud-native environments, the full-time salaried Security Engineer for Cloud Infrastructure will lead threat modeling and security reviews, build automation and security tooling, and design secure baselines for cloud resources while working remotely in the USA.

Key responsibilities

• Lead threat modeling and security reviews across products and cloud infrastructure, identifying attack surfaces and developing mitigation strategies
• Build automation, policy-as-code, and security tooling to integrate end-to-end security into development workflows
• Drive vulnerability management and remediation efforts, prioritizing issues and implementing strategic preventative controls

Required qualifications

• 7+ years of experience in security engineering or security operations in cloud environments
• Experience with AWS cloud security or equivalent experience in Azure and GCP
• Experience with cloud-native Kubernetes services and strong container security principles
• Practical understanding of web application security concepts such as OWASP Top-10
• Experience with Infrastructure as Code (IaC) and related tools like Terraform or CloudFormation