Senior Cloud Security Engineer

In this role, you will: 

• Design, implement, and manage AWS and Azure-based solutions that integrate security measures through policy as code.
• Collaborate with development and operations teams across the globe to embed security practices into the software development lifecycle.
• Develop and maintain infrastructure as code (IaC) templates using tools like AWS CloudFormation or Terraform to enforce security policies, driven via CI/CD practices
• Create and maintain security policies as code using frameworks like AWS CloudFormation Guard, Open Policy Agent (OPA), or similar tools.
• Implement and automate security controls, such as identity and access management (IAM), encryption, network security, and compliance auditing.
• Monitor and respond to security incidents, vulnerabilities, and threats in the AWS and Azure environments.
• Perform security assessments to identify and remediate vulnerabilities.
• Research and stay up-to-date with the latest cloud security best practices, tools, and technologies.
• Mentor and guide software engineers promoting knowledge sharing and skill development.

Your background: 

• Continuously deliver value to our internal customers through frequent releases of meaningful improvements to our systems.
• Bachelor’s degree in computer science, information technology, or a related field (or equivalent experience.)
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS and Azure.
• Strong understanding of cloud services, architecture, and security best practices.
• Proficiency in implementing security measures using policy as code tools and frameworks.
• Experience with IaC tools such as AWS CloudFormation, Terraform, etc.
• Familiarity with scripting languages (e.g., Python, Bash) for automation tasks.
• Knowledge of industry security standards (e.g., ISO 27001, NIST) and regulatory requirements.
• Relevant AWS certifications (e.g., AWS Certified DevOps Engineer, AWS Certified Security Specialty) would be a plus.
• Experience in designing and implementing automated testing procedures for security controls within the AWS environment.
• Demonstrated ability to create automated remediation processes based on testing outcomes.
• Excellent problem-solving skills and the ability to work effectively in a fast-paced, collaborative environment.
• Strong communication skills to interact with cross-functional teams across different time zones and articulate security concepts.
• Experience with security testing and remediation frameworks
• Experience with Tools such as Wiz and Harness, is a significant plus.

If this sounds like you and fits your experience and career goals, we’d be happy to chat.   

What we offer in return is the opportunity to experience a great company culture with wonderful colleagues to learn from and collaborate with and also to enjoy:  

• Medical, dental, vision, life & disability, and financial benefits (including 401(k) retirement savings plan. Tuition Reimbursement program. Additional voluntary benefits including crucial illness/hospital indemnity, identity theft protection, auto & home insurance, legal, and pet insurance. 
• Competitive salary, bonus, and best-in-class Employee Stock Purchase Program (ESPP) with a 27-month lookback
• Flexible paid vacation time, paid day off for your birthday, and company holidays. A variety of leave plans, including Parental Leave.
• Employee Assistance Program (EAP) and an employee well-being program focusing on physical, mental, and financial health.