Senior Cloud Security Engineer

Overview

Senior Cloud Security Engineer to strengthen Yext’s Product and Infrastructure Security program with cloud security automation, container security, and Security as Code.

What you'll do

• Lead cloud and enterprise security maturity by identifying architectural infrastructure gaps and creating automated solutions.
• Design, deploy, and maintain immutable cloud security controls across AWS and GCP using Infrastructure as Code (Terraform).
• Define, implement, and monitor security baselines for Docker and Kubernetes runtime security.
• Integrate SAST, DAST, dependency, and secret scanning into engineering CI/CD deployment pipelines.
• Oversee cloud vulnerability scanning, prioritize by runtime risk, and coordinate remediation with engineering teams.
• Lead security architecture reviews and threat modeling for cloud-native applications, providing actionable recommendations.
• Author and contribute to cloud security policies and map technical controls to SOC2 and ISO 27001.

What you'll need

• 6+ years of relevant work experience in Cloud Security Engineering or Product Security Cloud Infrastructure.
• Hands-on experience managing security controls within AWS and/or GCP environments.
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, or Pulumi.
• Practical experience securing Kubernetes environments, including network policies and scanning container images.
• High proficiency in security automation using Python, Go, PowerShell, or Bash.
• Alignment with security frameworks and standards such as NIST, ISO 27001, or CIS benchmarks.
• Strong communication and collaboration with Engineering, IT, and Product stakeholders.