Senior Cloud Security Engineer

What you'll do

• Build security into new cloud infrastructure in partnership with the Infrastructure team.
• Lead and scope initiatives to reduce cloud infrastructure risk through repeatable and maintainable processes.
• Create alerts, detections, and dashboards within CSPM and SIEM tools.
• Write actionable runbooks for incident response teams.
• Manage CSPM findings from initial triage through remediation via Terraform changes.
• Design and debug AWS permissions and network configurations based on the principle of least privilege.
• Participate in an on-call rotation to investigate security incidents and root cause issues.
• Implement new controls to prevent the recurrence of identified security incidents.

What we're looking for

• Must have 3+ years of experience in cloud security or cloud infrastructure with a security focus, primarily in AWS.
• Must have hands-on experience with AWS networking and security services including VPC, Security Groups, NACLs, WAF, GuardDuty, Config, Inspector, KMS, and IAM.
• Must be able to provision infrastructure as code using Terraform.
• Must have working knowledge of Kubernetes or EKS.
• Must have experience with SIEM and CSPM tools, including tuning alerts and building detections.
• Must be proficient in scripting or programming in Python or TypeScript.
• Must have on-call incident response experience and the ability to communicate risk to non-security engineers.
• Experience with AWS Organizations, multi-account environments, PKI, or cryptography is preferred; AWS certifications are preferred.