Cloud Security Engineer

Team: Security

Location: Any

Commitment: Full-time Employee

Workplace Type: hybrid

Responsibilities:

Lead security architecture assessment and hardening for cloud platforms (primarily AWS); define and maintain cloud security baselines, policies, and standards
Continuously monitor the security posture of the cloud environment (IAM, networking, storage, compute, etc.); identify, analyze, and assess security vulnerabilities and configuration risks, evaluating their severity and business impact
Own the vulnerability remediation lifecycle end-to-end: define remediation plans and priorities, guide and drive engineering and operations teams to complete fixes, and track and verify remediation outcomes
Build and improve cloud security monitoring, alerting, and automated detection mechanisms (e.g., CSPM, CNAPP tools)
Participate in security incident response, producing root cause analyses and improvement recommendations
Produce security assessment reports and communicate cloud risk posture to management

Requirements:

5+ years of experience in cloud security or information security, including at least 3 years focused on AWS environments
Strong command of core AWS services (IAM, VPC, S3, EC2, KMS, CloudTrail, GuardDuty, Security Hub, etc.) and their security best practices
Solid vulnerability identification and risk assessment skills; familiarity with common cloud security frameworks (CIS Benchmark, NIST, MITRE ATT&CK for Cloud)
Proven experience driving remediation efforts across teams, with strong communication and project coordination skills
Familiarity with at least one CSPM/CNAPP tool (e.g., Wiz, Prisma Cloud, AWS Security Hub)
Scripting/automation skills (Python, Terraform, CloudFormation, etc.) are a plus