Cloud Security and Compliance Engineer
First seen by Alion on Nov 11, 2026.
About Come Back Agency & Client Position
Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.
This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.
About the Role
As we continue to expand our Enterprise footprint in the US, we are looking for a dedicated Cloud Security & Compliance Engineer who will drive cloud security architecture, enforce technical security controls, and lead compliance readiness.
In this role, you will be responsible for hardening AWS infrastructure, integrating security scanners into CI/CD pipelines, enforcing identity and access management, and automating evidence collection for enterprise compliance standards (SOC 2, ISO 27001). You will focus purely on cloud security engineering and compliance automation, collaborating with the core DevOps team without handling routine application deployments.
What You Will Do
Cloud Security Architecture & Hardening: Design and implement technical security controls in AWS, including IAM least-privilege policies, KMS encryption, network segmentation, and secrets management.
Compliance Readiness & Automation: Lead SOC 2 and ISO 27001 audit preparation by identifying security gaps, maintaining compliance automation tools (Vanta, Drata, or AWS Security Hub), and collecting audit evidence.
DevSecOps Integration: Integrate automated security scanning tools (SAST/DAST, container image scanning via Trivy, IaC scanning via Checkov/Tfsec) into CI/CD pipelines (GitHub Actions).
Security Monitoring & Auditability: Configure and manage AWS native security tools (AWS Config, Security Hub, GuardDuty, CloudTrail) to maintain continuous visibility over cloud compliance.
Vulnerability & Incident Management: Perform regular vulnerability scans, evaluate security alerts, coordinate remediation of infrastructure vulnerabilities, and support incident response efforts.
Vendor & Enterprise Reviews: Provide technical support during enterprise client security reviews, questionnaires, and third-party security audits.
Requirements
Experience: 2.5+ years of hands-on experience in Cloud Security, DevSecOps, or Information Security Engineering.
AWS Security Depth: Deep understanding of AWS security tools and concepts (IAM policies, KMS, Secrets Manager, Security Groups, VPC Peering, CloudTrail, Security Hub).
Compliance Standards: Practical experience with evidence collection, technical gap remediation, and readiness preparation for SOC 2 and/or ISO 27001 (PCI DSS is a plus).
DevSecOps & Pipeline Security: Hands-on experience embedding security scanners (Trivy, Checkov, SonarQube) into automated CI/CD pipelines (GitHub Actions / GitLab CI).
Scripting & IaC Understanding: Ability to read/write Terraform code to implement security configurations and technical controls.
Communication: B2+ English level (Upper-Intermediate or higher) for clear verbal and written communication with US clients, security auditors, and internal teams.
Nice to Have
Practical experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).
Recognized security certifications (e.g., AWS Certified Security – Specialty, CKS, Certified Information Systems Auditor, or CISSP).
Hands-on experience with Kubernetes security practices and benchmarks (CIS Kubernetes Benchmark).
What We Offer
Working hours aligned with US time zones (16:00–00:00 Kyiv time).
Company-sponsored English lessons to support clear and confident communication.
Paid vacation and sick days.
Fully remote work model.
Opportunities for professional growth and financial support for professional certifications.
Structured, personalized onboarding to help you ramp up effectively.
Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.