Cloud Security Engineer

What you'll do

• Own the security architecture of AWS estate across multiple accounts, EKS clusters, and Terraform-managed infrastructure.
• Manage and optimize CNAPP and CSPM cloud security tooling for automated remediation of infrastructure risks.
• Modernize secure access strategy by deploying Zero Trust principles for least-privileged access to internal systems.
• Harden EKS environment through RBAC, admission policies, workload identity, runtime protection, and image signing.
• Build agentic detection-and-response workflows using Lambda and AWS-native primitives for continuous security monitoring.

What we're looking for

• 5+ years of cloud or infrastructure security experience with deep AWS expertise.
• Strong skills in Go, Python, TypeScript, and ability to read/write Terraform and shell scripts.
• Hands-on Kubernetes security experience including RBAC, network policies, admission control.
• Experience deploying and operating CSPM/CNAPP tooling like Wiz, Datadog Cloud Security.
• Identity-first security mindset with expertise in IAM, OIDC, SAML, federation, secrets management.