Cloud Security Engineer

Join our team as a Cloud Security Engineer, where you will play a crucial role in securing our infrastructure across diverse multi-cloud environments. You will establish robust guardrails, enforce Identity and Access Management policies, and maintain our Cloud Security Posture Management (CSPM) to prevent insecure deployments and ensure continuous compliance. This position offers a comprehensive benefits package, including health insurance, a fitness stipend, 401(k) match, learning stipend, parental leave, and catered meals.

• Establish robust guardrails, enforce Identity and Access Management policies, and maintain Cloud Security Posture Management.
• Implement and enforce security best practices and policies specifically tailored for Cloud native Kubernetes clusters.
• Manage infrastructure and security policies through version-controlled Git repositories using tools such as Terraform, CloudFormation, or AWS CDK.
• Deep operational security experience with AWS (mandatory), with highly preferred practical experience deploying and securing infrastructure across Azure, GCP, or OCI
• Experience working with container security, image scanning, and runtime protection tools
• Extensive, demonstrable experience with Kubernetes from a security perspective (e.g., securing containerized workloads, enforcing RBAC, and cloud-native secret management)
• 5+ years of industry experience in software engineering or security engineering, with a focus on designing and building secure, production-grade cloud systems
• A strong background in designing and enforcing complex Identity & Access Management (IAM) and least-privilege architectures across both multi-cloud and traditional on-premises directory environments
• Proficiency in Infrastructure-as-Code (IaC) tools such as Terraform, CloudFormation, or AWS CDK to deploy and manage environments
• Hands-on expertise in configuring, monitoring, and driving remediation through Cloud Security Posture Management (CSPM) platforms like Wiz
• Implemented AI to rapidly identify, validate, and remediate security issues without impact
• Strong proficiency in programming or scripting languages commonly used for security automation and backend development (e.g., Go/Golang, Python, or C++)
• Prior experience automating compliance frameworks and generating audit evidence across a multi-cloud footprint
• Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles
• Experience securing and operating in air-gapped or highly constrained on-premises computing environments
• Advanced industry certifications related to cloud and container security (e.g., AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), Certified Kubernetes Administrator (CKA))