{"id":2440203,"url":"https://alion.io/job/situsamc-cloud-security-engineer-infrastructure-aws-remote","title":"Cloud Security Engineer - Infrastructure - AWS - Remote","company":{"id":2786781,"name":"SitusAMC","domain":"situsamc.com","url":"https://alion.io/company/situsamc","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":135000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-12T00:00:00Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-14T10:19:57Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"SitusAMC is where the best and most passionate people come to transform our client’s businesses and their own careers. Whether you’re a real estate veteran, a passionate technologist, or looking to get your start, join us as we work together to realize opportunities for everyone, we proudly serve.\nAt SitusAMC, we are looking to match your unique experience with one of our amazing careers, so that we can help you realize your potential and career growth within the Real Estate Industry. If you are someone who can be yourself, advocate for others, stay nimble, dream big, own every outcome, and think global but act local - come join our team!\nThe Senior Cloud & Infrastructure Security Engineer is a senior technical member of the Information Security organization responsible for designing, implementing, and maintaining security controls across cloud and infrastructure environments.This is a hands-on engineering role that works closely with Site Reliability Engineering (SRE), Platform Engineering, Infrastructure, DevOps, and application development teams to ensure security is engineered into cloud platforms and infrastructure from the outset. The objective is to make secure configurations the default, allowing engineering teams to move quickly while maintaining appropriate security controls.\nThe successful candidate will combine deep cloud and infrastructure expertise with strong security engineering skills. This individual will have the technical capability and authority to implement security controls directly, including AWS IAM policies and roles, VPC and network security controls, cloud security guardrails, logging and monitoring, encryption controls, and Infrastructure-as-Code (IaC).\nEssentials Job Functions:\nCloud Security Engineering\nDesign and maintain AWS security controls across IAM, VPC, encryption, monitoring, and cloud-native services.\nApply least-privilege access, secure networking, encryption, logging, and monitoring standards.\nSupport secure adoption of AWS services by translating cloud risks into technical safeguards.\nInfrastructure & Platform Security\nPartner with SRE, Platform, Infrastructure, DevOps, and development teams to secure enterprise platforms and cloud infrastructure.\nDefine secure baselines, hardening standards, reusable guardrails, and preventative controls for infrastructure technologies.\nReview infrastructure designs to identify security gaps and recommend scalable remediation.\n\nInfrastructure-as-Code & DevSecOps\nBuild and maintain security controls through Infrastructure-as-Code using Terraform, CloudFormation, reusable modules, and templates.\nIntegrate automated policy, configuration, vulnerability, and compliance checks into CI/CD pipelines.\nEmbed security testing and guardrails into deployment workflows to reduce manual review.\nCloud Security Monitoring & Respons e\nCentralize and protect cloud security telemetry for monitoring, detection, and incident response.\nPartner with Security Operations to investigate incidents and build automated detection and remediation capabilities.\nUse logs, alerts, and findings to improve detection coverage and response readiness.\nSecurity Architecture & Risk Management\nConduct security architecture reviews and translate risk requirements into practical technical controls.\nCommunicate cloud and infrastructure risks, business impact, and remediation options to stakeholders.\nDevelop reference architectures, security patterns, technical standards, and engineering guidance.\nOther tasks as assigned by manager\nQualifications/ Requirements:\nBachelor’s degree in a technical field from an accredited college/university, or equivalent job experience.\nMinimum of 8+ years of industry and/or relevant experience, typically with 2+ years in an AVP level role or external equivalent.\nAt least 7+ years of direct relevant work experience in cloud security engineering, application/product security or a similar role\nAt least 5+ years of experience in cloud engineering, infrastructure engineering, security engineering,DevSecOps, SRE, or related technical disciplines.\nRelevant certifications such as CISSP, CEH, GIAC, ISSAP, CISM or other relevant security-focused certifications preferred\nSignificant hands-on experience securing production AWS environments including: Strong understanding of AWS IAM, including policies, roles, trust policies, permission boundaries, federation, cross-account access, and least-privilege design; Strong knowledge of AWS networking, including VPCs, subnets, routing, security groups, network ACLs, VPC endpoints, load balancers, DNS, and private connectivity. \nExperience securing Kubernetes and containerized environments, including EKS or comparable managed Kubernetes platforms. \nHands-on experience with AWS security services such as CloudTrail, Config, GuardDuty, Security Hub, Inspector, IAM Access Analyzer, KMS, and Secrets Manager. \nExperience implementing infrastructure using Terraform, CloudFormation, or comparable Infrastructure-as-Code technologies. \nExperience with Git-based development and CI/CD workflows. \nStrong understanding of networking concepts, including TCP/IP, DNS, TLS, routing, firewalls, proxies, and network segmentation. \nWorking knowledge of Linux and common infrastructure technologies. \nHighly motivated self-starter that can manage multiple deliverables independently in a fast-paced environment \nAbility to develop automation using Python, PowerShell, Bash, or similar scripting languages. \nUnderstanding of common cloud attack techniques, identity-based attacks, privilege escalation, credential compromise, and infrastructure security vulnerabilities. \nDemonstrated ability to independently troubleshoot complex technical security and infrastructure problems. \nStrong written and verbal communication skills with the ability to communicate effectively with security professionals, engineers, architects, and technology leadership. \nHighly motivated self-starter that can manage multiple deliverables independently in a fast-paced environment\nBroad knowledge across the security, insider threat, risk management and compliance domains.\nProficiency in scripting and automation (e.g., Python, PowerShell, Terraform)\nFamiliarity with container security technologies (Docker, Kubernetes).\nHave familiarity with infrastructure as code (IaC) tooling\nKnowledge of encryption and key management practices.\nExcellent risk based problem-solving, analytical, and communication skills.\nAbility to work independently and as part of a team.\n#LI-AS1 #LI-Remote\nNote: This job description is not intended to be all inclusive or exclusive. At any time, employees may perform other related duties as required to meet the ongoing needs of the organization and participate in additional trainings. SitusAMC does not accept unsolicited resumes from staffing agencies, search firms or any third parties. Any unsolicited resume submitted to SitusAMC in any manner will be considered SitusAMC property, and SitusAMC will not pay a fee for any placement resulting from the receipt of an unsolicited resume.\nThe annual full time base salary range for this role is\n$135,000.00 - $180,000.00Specific compensation is determined through interviews and a review of relevant education, experience, training, skills, geographic location and alignment with market data. Additionally, certain positions may be eligible to receive a discretionary bonus as determined by bonus program guidelines, position eligibility and SitusAMC Senior Management approval. SitusAMC offers PTO and paid holidays, the terms of which are set forth in the program policies. All full time employees also are eligible to participate in various benefit plans, including medical, dental, vision, life, disability insurance and 401K; in each case in accordance with the terms of the applicable plans.\nPay Transparency Nondiscrimination Provision\nSitusAMC is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.\nKnow Your Rights, Workplace Discrimination is Illegal","description_format":"text","description_chars":8269,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Commercial Real Estate","Financial Software & Embedded Finance","Real Estate Appraisal"],"lifecycle":[{"event":"open","at":"2026-10-13T11:53:50Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":35,"reasons":["conf:13","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/situsamc-cloud-security-engineer-infrastructure-aws-remote","json_url":"https://alion.io/job/situsamc-cloud-security-engineer-infrastructure-aws-remote.json","meta":{"generated_at":"2026-10-14T10:26:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":1880,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2786781},"rest":"https://alion.io/mcp/rest/get_company?id=2786781"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsitusamc-cloud-security-engineer-infrastructure-aws-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsitusamc-cloud-security-engineer-infrastructure-aws-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsitusamc-cloud-security-engineer-infrastructure-aws-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/situsamc-cloud-security-engineer-infrastructure-aws-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsitusamc-cloud-security-engineer-infrastructure-aws-remote"}]}