Cloud Security Engineer

Description

• Build observability, monitoring, alerting, and detection systems to surface security anomalies or misconfigurations early
• Drive secure CI/CD pipelines, infrastructure-as-code practices, and compliance automation (e.g., drift detection, policy-as-code)
• Lead incident response for cloud-based security events; root-cause analysis, remediation, and post-mortem processes
• Manage secrets, credentials, keys, and certificate lifecycle across cloud services and tooling securely and reliably
• Define and enforce security architecture standards, policies, and best practices for cloud systems
• Implement identity, authentication, and authorization frameworks for cloud services (e.g., IAM, RBAC, least-privilege access)
• Conduct threat modeling, vulnerability assessments, and regular audits of cloud, network, and service-level security
• Design, build, and maintain secure, scalable cloud infrastructure and backend systems for production workloads
• Document cloud-security architecture, decisions, and standard operating procedures; maintain clear risk assessments
• Collaborate with backend engineering, DevOps/infrastructure, and hardware teams to ensure holistic security coverage as we scale

Requirements

• Experience with infrastructure as code (e.g., Terraform, CloudFormation), CI/CD pipelines, and automated deployment systems
• Deep understanding of secure infrastructure design, threat modeling, attack surface minimization, and defense-in-depth strategies
• Proven expertise in cloud security best practices: IAM, secret management, encryption (in-transit and at-rest), certificate & key management, network security (VPC, subnets, firewalls), etc.
• Strong Opinions, Loosely Held: Drive clarity and make calls with imperfect information.
• Several years of backend or infrastructure engineering experience with strong cloud-native background (e.g., AWS, GCP, Azure)
• Ability to own end-to-end security for systems from design through production deployment and ongoing operations
• Proactive, self-driven mindset: ideal for someone comfortable building security from 0 → 1 in a fast-paced environment
• Strong communication and cross-team collaboration skills; ability to influence design and operating practices across a growing org
• Familiarity with monitoring/logging frameworks and security observability tools (e.g., Cloud-native logging, SIEM, detection/alerting tooling)
• Comfortable writing production-quality backend code (e.g., Python, Go, or similar). This role is hands-on engineering, not just policy

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance