Cloud Security Engineer

About the position

You are a cloud security specialist with a strong background in AWS environments. You have a deep understanding of AWS security services, cloud architecture, and best practices to protect sensitive data and mitigate risks. You enjoy collaborating with cross-functional teams to ensure security is embedded throughout the cloud lifecycle from design to deployment and monitoring. You are proactive, detail-oriented, and passionate about staying ahead of emerging security threats.

Responsibilities

• Design and implement security controls and configurations for AWS services, including EC2, S3, VPC, IAM, EKS, Lambda, RDS, and more.
• Conduct risk assessments, vulnerability scans, and penetration testing on AWS infrastructure to identify and remediate security gaps.
• Develop and enforce IAM policies, roles, and permissions to ensure least-privilege access across AWS environments.
• Configure and manage AWS security tools such as AWS Security Hub, GuardDuty, CloudTrail, AWS Config, and Inspector to monitor and respond to threats.
• Implement encryption mechanisms for data at rest and in transit using AWS KMS (Key Management Service) and other cryptographic tools.
• Collaborate with DevOps teams to integrate security into CI/CD pipelines using tools like AWS CodePipeline and third-party solutions.
• Respond to security incidents, perform root cause analysis, and recommend corrective actions to prevent recurrence.
• Ensure compliance with industry standards and regulations (e.g., SOC 2, ISO27001) within AWS environments.
• Stay up-to-date with emerging cloud security threats, AWS updates, and best practices to proactively enhance security posture.
• Document security processes, architectures, and incident reports for internal and audit purposes.

Requirements

• 3+ years of experience in cloud security, with at least 2 years focused on AWS environments.
• Strong knowledge of AWS security services (e.g., IAM, GuardDuty, CloudTrail, KMS, WAF) and their practical application.
• Experience with infrastructure-as-code (IaC) tools like Terraform or AWS CloudFormation for secure deployments.
• Familiarity with scripting languages (e.g., Python, Bash) for automation of security tasks.
• Understanding of networking concepts (e.g., VPC, subnets, security groups, NACLs) and their security implications in AWS.
• Proven ability to conduct threat modeling, vulnerability management, and incident response in cloud environments.
• Excellent problem-solving skills and attention to detail.
• Strong communication skills to collaborate with technical and non-technical stakeholders.

Nice-to-haves

• Experience with container security (e.g., Docker, Kubernetes) in AWS ECS or EKS.
• Familiarity with compliance frameworks and audit processes.

Benefits

• Competitive salaries
• 100% paid medical/vision/dental/disability/life insurance
• Unlimited PTO
• Hybrid environment; 3x weekly in an innovation hub in San Francisco or Dallas