Senior Security Engineer

Join Abnormal AI as a Senior Cloud Security Engineer, where you will be responsible for building and operating security systems that protect our FedRAMP authorized environment. You will have meaningful ownership of both architecture and operational results, and work closely with various teams to solve cloud security problems. Your work will include creating policy gates for cloud deployments, automating patch and access workflows, strengthening identity controls, improving security telemetry, and generating audit evidence directly from engineering systems.

Missions

• Conception et mise en œuvre de pipelines de livraison sécurisés, d'automatisation des correctifs et de contrôles d'identité.
• Collaboration avec les équipes DevInfra, FedOps, Product Security, Detection and Response et Compliance pour résoudre les problèmes de sécurité cloud.
• Responsabilité de la fiabilité des pipelines de journalisation et de surveillance de la sécurité, y compris la couverture d'ingestion, la qualité des données, la santé des sources.

Profil recherché

- 8+ years in cloud security engineering, DevSecOps, infrastructure security, or a closely related engineering discipline, including deep hands-on experience with AWS

- Proficiency in at least one scripting or programming language, preferably Python, with a record of automating recurring operational work

- Production experience with security monitoring and incident response, including investigation, containment, recovery, and operational follow through

- Strong experience building or securing cloud deployment pipelines and infrastructure as code workflows

- Working knowledge of identity and access management design and enforcement in large cloud environments

- Experience integrating security automation into CI/CD pipelines and SecOps workflows

- Prior experience supporting federal audits or 3PAO engagements

- Knowledge of SaaS security operations and monitoring at scale

- Knowledge of SaaS security operations and modern cloud environments; exposure to DevSecOps pipelines or security reviews for Terraform/containers

- Experience driving automation in security operations, compliance tracking, and evidence management

- Experience with FedRAMP, DoD IL4, DoD IL5, government, or another highly regulated cloud environment, including support for 3PAO assessments or federal audits

- Familiarity with NIST SP 800-53 controls, continuous monitoring, security impact analysis, and technical evidence requirements

- Experience building compliance automation, continuous control monitoring, or automated evidence management capabilities