{"id":4101741,"url":"https://alion.io/job/come-back-agency-cloud-security-and-compliance-engineer","title":"Cloud Security and Compliance Engineer","company":{"id":4485829,"name":"Come Back Agency","domain":"comeback.ua","url":"https://alion.io/company/come-back-agency","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"US time zones","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"tfsec","optional":false},{"name":"Trivy","optional":false},{"name":"GitLab CI","optional":true},{"name":"Kubernetes","optional":true},{"name":"SonarQube","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-11T20:24:05Z","employer_posted_date":null,"last_verified_at":"2026-11-11T20:24:05Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Come Back Agency & Client Position\n\nCome Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.\n\nThis position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.\n\nAbout the Role\n\nAs we continue to expand our Enterprise footprint in the US, we are looking for a dedicated Cloud Security & Compliance Engineer who will drive cloud security architecture, enforce technical security controls, and lead compliance readiness.\n\nIn this role, you will be responsible for hardening AWS infrastructure, integrating security scanners into CI/CD pipelines, enforcing identity and access management, and automating evidence collection for enterprise compliance standards (SOC 2, ISO 27001). You will focus purely on cloud security engineering and compliance automation, collaborating with the core DevOps team without handling routine application deployments.\n\nWhat You Will Do\n\nCloud Security Architecture & Hardening: Design and implement technical security controls in AWS, including IAM least-privilege policies, KMS encryption, network segmentation, and secrets management.\n\nCompliance Readiness & Automation: Lead SOC 2 and ISO 27001 audit preparation by identifying security gaps, maintaining compliance automation tools (Vanta, Drata, or AWS Security Hub), and collecting audit evidence.\n\nDevSecOps Integration: Integrate automated security scanning tools (SAST/DAST, container image scanning via Trivy, IaC scanning via Checkov/Tfsec) into CI/CD pipelines (GitHub Actions).\n\nSecurity Monitoring & Auditability: Configure and manage AWS native security tools (AWS Config, Security Hub, GuardDuty, CloudTrail) to maintain continuous visibility over cloud compliance.\n\nVulnerability & Incident Management: Perform regular vulnerability scans, evaluate security alerts, coordinate remediation of infrastructure vulnerabilities, and support incident response efforts.\n\nVendor & Enterprise Reviews: Provide technical support during enterprise client security reviews, questionnaires, and third-party security audits.\n\nRequirements\n\nExperience: 2.5+ years of hands-on experience in Cloud Security, DevSecOps, or Information Security Engineering.\n\nAWS Security Depth: Deep understanding of AWS security tools and concepts (IAM policies, KMS, Secrets Manager, Security Groups, VPC Peering, CloudTrail, Security Hub).\n\nCompliance Standards: Practical experience with evidence collection, technical gap remediation, and readiness preparation for SOC 2 and/or ISO 27001 (PCI DSS is a plus).\n\nDevSecOps & Pipeline Security: Hands-on experience embedding security scanners (Trivy, Checkov, SonarQube) into automated CI/CD pipelines (GitHub Actions / GitLab CI).\n\nScripting & IaC Understanding: Ability to read/write Terraform code to implement security configurations and technical controls.\n\nCommunication: B2+ English level (Upper-Intermediate or higher) for clear verbal and written communication with US clients, security auditors, and internal teams.\n\nNice to Have\n\nPractical experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).\n\nRecognized security certifications (e.g., AWS Certified Security – Specialty, CKS, Certified Information Systems Auditor, or CISSP).\n\nHands-on experience with Kubernetes security practices and benchmarks (CIS Kubernetes Benchmark).\n\nWhat We Offer\n\nWorking hours aligned with US time zones (16:00–00:00 Kyiv time).\n\nCompany-sponsored English lessons to support clear and confident communication.\n\nPaid vacation and sick days.\n\nFully remote work model.\n\nOpportunities for professional growth and financial support for professional certifications.\n\nStructured, personalized onboarding to help you ramp up effectively.\n\nApply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.","description_format":"text","description_chars":4387,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-11T21:42:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["seen:0","win:early"],"computed_at":"2026-11-11T22:58:05Z"},"pay":null,"html_url":"https://alion.io/job/come-back-agency-cloud-security-and-compliance-engineer","json_url":"https://alion.io/job/come-back-agency-cloud-security-and-compliance-engineer.json","meta":{"generated_at":"2026-11-11T22:58:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":45573,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4485829},"rest":"https://alion.io/mcp/rest/get_company?id=4485829"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcome-back-agency-cloud-security-and-compliance-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcome-back-agency-cloud-security-and-compliance-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcome-back-agency-cloud-security-and-compliance-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/come-back-agency-cloud-security-and-compliance-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcome-back-agency-cloud-security-and-compliance-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4101741}},{"tool":"search_jobs","arguments":{"company":"comeback.ua","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4101741},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}