Cloud Security Engineer

Responsibilities:

• Lead security architecture assessment and hardening for cloud platforms (primarily AWS); define and maintain cloud security baselines, policies, and standards
• Continuously monitor the security posture of the cloud environment (IAM, networking, storage, compute, etc.); identify, analyze, and assess security vulnerabilities and configuration risks, evaluating their severity and business impact
• Own the vulnerability remediation lifecycle end-to-end: define remediation plans and priorities, guide and drive engineering and operations teams to complete fixes, and track and verify remediation outcomes
• Build and improve cloud security monitoring, alerting, and automated detection mechanisms (e.g., CSPM, CNAPP tools)
• Participate in security incident response, producing root cause analyses and improvement recommendations
• Produce security assessment reports and communicate cloud risk posture to management

Requirements:

• 5+ years of experience in cloud security or information security, including at least 3 years focused on AWS environments
• Strong command of core AWS services (IAM, VPC, S3, EC2, KMS, CloudTrail, GuardDuty, Security Hub, etc.) and their security best practices
• Solid vulnerability identification and risk assessment skills; familiarity with common cloud security frameworks (CIS Benchmark, NIST, MITRE ATT&CK for Cloud)
• Proven experience driving remediation efforts across teams, with strong communication and project coordination skills
• Familiarity with at least one CSPM/CNAPP tool (e.g., Wiz, Prisma Cloud, AWS Security Hub)
• Scripting/automation skills (Python, Terraform, CloudFormation, etc.) are a plus