Staff Cloud Security Engineer

Overview

Staff Cloud Security Engineer responsible for designing automated security controls and hardening multi-cloud infrastructure, while integrating secure development practices across cloud applications.

What you'll do

• Integrate security controls into CI/CD platforms (GitHub, GitLab, Jenkins, Azure DevOps).
• Implement IaC scanning and configure IaC scanning tools to surface true risk.
• Build developer feedback loops and automated remediation workflows for secure-by-default software.
• Develop and maintain IAM cloud identity controls using least-privilege policy enforcement.
• Govern secure use of cloud identities, APIs, and secrets management.
• Develop infrastructure security baselines, vulnerability management, and hardening standards across AWS, Azure, or GCP.
• Support monitoring, detection, and incident response using SIEM/CSPM/CWPP and forensic analysis.

What you'll need

• 7-10+ years of hands-on experience in cloud security, application security, DevSecOps, or related roles.
• Deep hands-on experience with Azure and/or AWS security services for multi-cloud application controls.
• Proficiency in scripting (Python, Bash, PowerShell) to automate security tasks.
• Strong understanding of container security (Docker, Kubernetes) and IaC security (Terraform, ARM).
• Industry certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, GCSA, or OSCP are highly preferred.

Details

• Work mode: US Remote.
• Location line from source: US Remote.