Cloud Security Engineer

Role Overview

In this position, you will be responsible for securing an infrastructure that integrates cloud services with physical hardware in the field. This is a critical role where the impact of security gaps is tangible and immediate. You will manage and enhance the AWS security stack for a platform operating at the intersection of cloud and edge computing, embedding security into engineering workflows rather than imposing it externally.

Key Responsibilities

• Manage and advance the AWS security suite, including Identity Center, Security Hub, GuardDuty, WAF, Cognito, IAM, and Service Control Policies (SCPs).
• Develop and enforce security guardrails, policies, and compliance frameworks across a multi-account AWS environment.
• Conduct threat modeling, vulnerability assessments, and security evaluations at both cloud infrastructure and application layers.
• Protect the cloud-to-edge boundary by securing device connectivity and data exchanges between cloud components and field hardware.
• Oversee and refine network security architecture involving VPC, Transit Gateway, VPN, and Route53.
• Implement security controls through Infrastructure as Code (using CloudFormation and/or SAM).
• Integrate security measures into the CI/CD pipeline as preventive gates, including static and dynamic application security testing (SAST/DAST), dependency scanning, and container vulnerability scanning.
• Lead or assist in incident response efforts and security investigations when breaches or issues arise.
• Define and manage identity and access management strategies, handling authentication and authorization for applications.

Collaborative and Cultural Impact

• Serve as an influential partner working closely with engineering teams to weave security practices into the software development lifecycle (SDLC), avoiding an enforcement-only approach.
• Translate security expertise into actionable practices embraced by engineers instead of circumvented rules.
• Elevate security awareness across the engineering organization through clear documentation and standardized guidelines.
• Foster a culture where security is a fundamental consideration and collective responsibility, embedded into daily engineering habits.

Qualifications and Experience

• Minimum of five years' experience in cloud security engineering, application security, or related security roles.
• Extensive hands-on expertise with AWS security tools including Identity Center, Security Hub, GuardDuty, WAF, Cognito, IAM, SCPs, and Inspector.
• Foundational knowledge of application security concepts such as OWASP Top 10, secure code review, and the use of SAST/DAST tools.
• Experience managing security in multi-account AWS environments.
• Proficient understanding of network security architecture from a security perspective, especially VPC, Transit Gateway, VPN, and Route53.
• Ability to implement security controls using Infrastructure as Code tools like CloudFormation and SAM.
• Experience embedding security into CI/CD workflows, using platforms such as GitHub Actions or GitLab CI.
• Programming skills in languages suited for security tooling and automation like Python, Go, or Rust.
• Certifications such as AWS Security Specialty, CISSP, or OSCP are highly desirable.
• Familiarity with security auditing, compliance standards, and formal threat modeling processes.