Security Engineer (Cloud Security)

Join Saronic, a company focused on building a secure and efficient cloud environment. As a Security Engineer for our Cloud Security team, you will be responsible for managing the continuous security posture of our cloud infrastructure, building guardrails for fast and secure shipping, and ensuring compliance with government and commercial frameworks. You will work alongside various teams to keep our multi-account cloud environment secure, compliant, and auditable. This is an opportunity to make a significant impact on our cloud security posture and work in a high-trust, low-ego environment.

• Assurer la gestion continue de la posture de sécurité du cloud, détecter les erreurs de configuration et conduire la remédiation.
• Construire des modules Terraform réutilisables, des politiques de contrôle de service et des politiques en tant que code pour faciliter la sécurité.
• Diriger la gestion des vulnérabilités cloud à grande échelle, trouver les problèmes, les prioriser et conduire la remédiation à la clôture.
• Strong infrastructure-as-code (Terraform) and policy-as-code experience
• 3+ years of hands-on cloud security, infrastructure security, or DevSecOps experience, or an equivalent combination of experience and demonstrated ability
• Hands-on cloud vulnerability management and CSPM tooling (e.g., Prowler), with a track record of driving cloud findings to remediation
• Ability to obtain and maintain a U.S. security clearance
• Proficiency in scripting for security automation
• Depth in AWS security services and architecture (IAM, Organizations/SCPs, CloudTrail, Config, GuardDuty, Security Hub, KMS, VPC)
• A track record of building guardrails or patterns that other teams adopted without friction
• Visual acuity to read screens, documents, and reports
• Manual dexterity to operate a computer keyboard, mouse, and other office equipment
• Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)
• Prolonged periods of sitting at a desk and working on a computer
• Occasional standing and walking within the office
• Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies
• Experience in AWS GovCloud, FedRAMP, or IL4/IL5 environments
• Azure and on-prem security experience a plus
• Multi-account landing-zone and organizational security design
• CSPM with automated remediation at scale
• Container or Kubernetes security
• IAM attack-path analysis and outcome-based metrics
• Experience in defense, aerospace, robotics, or other high-assurance environments
• Familiarity with NIST SP 800-171/800-53
• If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3)
• This role requires an active U.S. security clearance or eligibility for a U.S. security clearance. Based on guidance from the U.S. Government, only U.S. citizens are eligible for U.S. security clearance, and the U.S. Government may request that you renounce other citizenship in order to obtain and maintain a security clearance