Cloud Security Engineer

Responsibilities:

Lead security architecture assessment and hardening for cloud platforms (primarily AWS); define and maintain cloud security baselines, policies, and standards

Continuously monitor the security posture of the cloud environment (IAM, networking, storage, compute, etc.); identify, analyze, and assess security vulnerabilities and configuration risks, evaluating their severity and business impact

Own the vulnerability remediation lifecycle end-to-end: define remediation plans and priorities, guide and drive engineering and operations teams to complete fixes, and track and verify remediation outcomes

Build and improve cloud security monitoring, alerting, and automated detection mechanisms (e.g., CSPM, CNAPP tools)

Participate in security incident response, producing root cause analyses and improvement recommendations

Produce security assessment reports and communicate cloud risk posture to management

Requirements:

5+ years of experience in cloud security or information security, including at least 3 years focused on AWS environments

Strong command of core AWS services (IAM, VPC, S3, EC2, KMS, CloudTrail, GuardDuty, Security Hub, etc.) and their security best practices

Solid vulnerability identification and risk assessment skills; familiarity with common cloud security frameworks (CIS Benchmark, NIST, MITRE ATT&CK for Cloud)

Proven experience driving remediation efforts across teams, with strong communication and project coordination skills

Familiarity with at least one CSPM/CNAPP tool (e.g., Wiz, Prisma Cloud, AWS Security Hub)

Scripting/automation skills (Python, Terraform, CloudFormation, etc.) are a plus