{"id":3953323,"url":"https://alion.io/job/altera-senior-cloud-security-engineer","title":"Senior Cloud Security Engineer","company":{"id":5328,"name":"Altera","domain":"altera.com","url":"https://alion.io/company/altera","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":17,"ghost_share":0,"stale_share":0.412,"repost_share":0.118,"time_to_fill_p50_days":53,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Jose, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":149100,"max":215925,"currency":"USD","period":"year","gross":null,"usd_annual":215925},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Azure AKS","optional":true},{"name":"Bicep","optional":true},{"name":"Checkov","optional":true},{"name":"CI/CD","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"CloudFormation","optional":true},{"name":"Defense in Depth","optional":true},{"name":"DNS","optional":true},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"Least Privilege","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"NIST CSF","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"PCI DSS","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-08T00:00:00Z","employer_posted_date":"2026-11-08","last_verified_at":"2026-11-09T05:53:40Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Details:\nJob Description:\nPosition Overview\nThe Senior Cloud Security Engineer is a hands-on technical lead responsible for designing, implementing, and improving security across the organization’s Microsoft Azure and Amazon Web Services (AWS) environments. This role partners with cloud platform, infrastructure, application, identity, and security operations teams to build secure cloud foundations, protect workloads and data, and make security controls repeatable through automation.\nThe ideal candidate combines deep practical knowledge of Azure and AWS security services with strong skills in cloud architecture, identity and access management, network security, detection and response, and infrastructure as code. Experience with Oracle Cloud Infrastructure (OCI) is a plus.\nKey Responsibilities\nCloud Security Architecture and Engineering\n· Design and implement secure architectures for Azure and AWS environments, including landing zones, accounts and subscriptions, networking, shared services, and workload environments.\n· Establish cloud security reference architectures, patterns, guardrails, and configuration standards that support secure, reliable, and scalable services.\n· Review cloud designs and changes for security risks, recommending pragmatic mitigations that fit business and operational needs.\n· Apply defense-in-depth principles across cloud identity, network, compute, storage, data, application, and management planes.\n· Help teams adopt secure cloud-native services and architecture patterns while minimizing unnecessary complexity and operational friction.\nIdentity and Access Management\n· Design and improve cloud identity and access controls, including least-privilege roles, federation, privileged access, service identities, and workload authentication.\n· Strengthen identity lifecycle, access review, and administrative access practices across Microsoft Entra ID, Azure, AWS IAM, and related identity providers.\n· Reduce reliance on long-lived credentials through managed identities, workload identity federation, role assumption, and secure secrets management.\n· Review policies and permissions for excessive privilege, unintended trust relationships, and cross-account or cross-tenant access risks.\n· Partner with identity teams to improve conditional access, multifactor authentication, privileged access management, and identity threat monitoring.\nCloud Platform and Workload Security\n· Secure cloud infrastructure and workloads, including virtual machines, containers, Kubernetes, serverless services, storage, databases, and managed platform services.\n· Establish and maintain secure baseline configurations, configuration policies, and preventive controls for Azure and AWS.\n· Implement cloud network security controls such as segmentation, routing safeguards, firewalls, private connectivity, egress controls, and protection of public-facing services.\n· Improve encryption and key management practices for data at rest and in transit, including certificate management and key lifecycle controls.\n· Help teams protect sensitive data through classification-aware controls, secure storage configuration, backup protection, and data access governance.\n· Support vulnerability management for cloud workloads, images, packages, and exposed services, using risk-based prioritization and clear ownership.\nInfrastructure as Code and Automation\n· Embed security controls into infrastructure-as-code workflows using tools such as Terraform, Bicep, CloudFormation, or equivalent technologies.\n· Develop reusable policy-as-code, templates, modules, and automated checks that make secure configurations easier to adopt.\n· Integrate security validation into CI/CD pipelines, including configuration analysis, secrets detection, image scanning, and deployment policy checks.\n· Automate cloud security operations and evidence collection using scripts, APIs, and cloud-native services.\n· Review automation for secure handling of credentials, permissions, state files, logs, and deployment identities.\nMonitoring, Detection, and Incident Response\n· Improve cloud security visibility, logging, alerting, and detection across Azure and AWS environments.\n· Configure and optimize cloud-native security and monitoring capabilities, such as Microsoft Defender for Cloud, Microsoft Sentinel, AWS Security Hub, Amazon GuardDuty, AWS Config, and CloudTrail, as appropriate to the environment.\n· Develop and tune detections for suspicious identity activity, risky configuration changes, anomalous access, exposed resources, and cloud control-plane threats.\n· Partner with security operations and incident response teams to investigate cloud security events and improve response playbooks.\n· Ensure critical logs are enabled, protected, retained, and accessible for investigation and compliance needs.\n· Participate in cloud incident response, root-cause analysis, and follow-up remediation.\nGovernance, Risk, and Compliance\n· Define cloud security policies, control objectives, configuration standards, and exception processes.\n· Assess cloud environments against recognized security frameworks and organizational requirements; track gaps through remediation.\n· Support audit, regulatory, customer assurance, and risk assessment activities with accurate technical evidence.\n· Maintain cloud asset, ownership, and risk visibility in partnership with platform and service teams.\n· Evaluate cloud services and design changes for data residency, privacy, resilience, and shared-responsibility implications.\n· Communicate cloud risks and mitigation options clearly to engineers, service owners, and leadership.\nCollaboration and Enablement\n· Partner with cloud platform, infrastructure, application engineering, data, identity, and security operations teams to solve security problems collaboratively.\n· Provide clear, actionable guidance and coach teams on secure cloud design and operational practices.\n· Document architectures, standards, implementation guidance, and operational procedures.\n· Mentor other engineers and contribute to a culture of security ownership and continuous improvement.\n\nCore Competencies\n· Azure and AWS security architecture\n· Cloud identity and access management\n· Cloud networking and workload security\n· Infrastructure as code and security automation\n· Cloud logging, detection, and incident response\n· Vulnerability and configuration risk management\n· Secure cloud governance and compliance\n· Cross-functional technical leadership\n· Clear documentation and stakeholder communication\nSalary Range\nThe pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.\n$149,100 - $215,925 USD\nWe use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.\nQualifications:\nMinimum Qualifications\nBachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent practical experience.\n7+ of experience in cloud security, cloud engineering, infrastructure security, security engineering, or a closely related discipline.\nDemonstrated hands-on security engineering experience with both Microsoft Azure and AWS.\nStrong understanding of cloud identity and access management, including Azure RBAC, Microsoft Entra ID, AWS IAM, federation, privileged access, and workload identities.\nExperience designing or securing cloud networking, including segmentation, private connectivity, firewalls, routing, DNS, and internet exposure controls.\nExperience securing cloud compute, storage, databases, containers, Kubernetes, and/or serverless workloads.\nPractical experience with infrastructure as code and automated cloud deployment workflows.\nExperience with cloud logging, monitoring, security posture management, vulnerability management, and incident response.\nUnderstanding of encryption, key management, secrets management, certificate management, and data protection in cloud environments.\nExperience in scripting or automating using languages such as Python, PowerShell, Bash, or similar..\nPreferred Qualifications\nExperience with Oracle Cloud Infrastructure (OCI) security architecture, identity, networking, logging, or governance.\nRelevant certifications such as Microsoft Certified: Cybersecurity Architect Expert, Azure Security Engineer Associate, AWS Certified Security - Specialty, AWS Certified Solutions Architect, CCSP, CISSP, or equivalent.\nExperience with Microsoft Defender for Cloud, Microsoft Sentinel, AWS Security Hub, Amazon GuardDuty, AWS Config, or comparable cloud security platforms.\nExperience with Terraform, Bicep, CloudFormation, Open Policy Agent, Checkov, or other infrastructure-as-code and policy-as-code tools.\nExperience securing Kubernetes and container platforms, including managed cloud services such as AKS and EKS.\nExperience supporting multi-account, multi-subscription, multi-region, or hybrid cloud environments.\nFamiliarity with frameworks and standards such as NIST CSF, NIST SP 800-53, CIS Benchmarks, ISO 27001, SOC 2, PCI DSS, or applicable industry requirements.\nExperience with cloud detection engineering, threat modeling, or cloud incident response.\nExperience applying zero-trust principles to cloud workloads and administrative access.\nJob Type:\nRegularShift:\nShift 1 (United States of America)Primary Location:\nSan Jose, California, United StatesAdditional Locations:\nPosting Statement:\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.","description_format":"text","description_chars":10087,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Processors, MCUs & AI Chips","EDA Software"],"lifecycle":[{"event":"open","at":"2026-11-09T05:53:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 71","filings_12m":71,"filings_prev_12m":39,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":53,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":215925,"is_top_pay":true},"html_url":"https://alion.io/job/altera-senior-cloud-security-engineer","json_url":"https://alion.io/job/altera-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-11-09T08:22:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6581,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5328},"rest":"https://alion.io/mcp/rest/get_company?id=5328"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faltera-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faltera-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faltera-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/altera-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faltera-senior-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3953323}},{"tool":"search_jobs","arguments":{"company":"altera.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3953323},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}