Senior Security Engineer II (Cloud)

In this role, you will design, implement, and enhance cloud security systems and tooling to ensure strong protection across infrastructure, applications, and data environments. You will also provide technical leadership and help drive security engineering best practices across teams.

• Design, deploy, and maintain security tooling including SIEM, EDR, DLP, vulnerability management, and firewall solutions
• Engineer and integrate security controls across cloud environments (AWS, Azure, or GCP), including IAM, VPCs, security groups, and container platforms
• Conduct architecture reviews and threat modeling for new and existing systems to identify and mitigate security risks
• Automate security processes and workflows using scripting (Python, PowerShell, Bash) and IaC tools such as Terraform and Ansible
• Implement and enhance DevSecOps practices across CI/CD pipelines and containerized environments (Kubernetes, Docker)
• Lead evaluation, configuration, and deployment of new security technologies to address emerging threats
• Perform vulnerability assessments, manage remediation efforts, and ensure continuous improvement of security posture
• Support incident response, threat hunting, and forensic investigations when security events occur
• Develop secure configurations for operating systems, applications, and network infrastructure
• Mentor junior engineers and provide technical guidance on security engineering practices and tooling

Requirements:

The ideal candidate is an experienced security engineer with deep expertise in cloud security, automation, and modern security tooling. You are proactive, analytical, and comfortable operating across both engineering and incident response domains.

• 7+ years of experience in security engineering with a focus on designing and managing security systems and tooling
• Strong hands-on experience with SIEM (e.g., Splunk, Sumo Logic), EDR (e.g., CrowdStrike, SentinelOne), and vulnerability management tools (e.g., Tenable, Qualys, Wiz, Snyk)
• Proven experience securing cloud environments (AWS, Azure, or GCP), including IAM, VPCs, security groups, and cloud-native security services
• Strong understanding of threat modeling, security architecture, and infrastructure security principles
• Experience with DevSecOps practices, CI/CD pipelines, and container security (Kubernetes, Docker)
• Proficiency in automation and infrastructure-as-code tools such as Terraform, Helm, Ansible, or similar
• Strong scripting skills in Python, PowerShell, or Bash for security automation and integration
• Experience in incident response, threat hunting, and forensic investigation activities
• Familiarity with compliance frameworks such as HIPAA, PCI DSS, or GDPR is a plus
• Relevant certifications such as CISSP, GSEC, AWS Security Specialty, or equivalent preferred

Benefits:

• Competitive compensation with base salary and potential annual incentives
• Fully remote work environment with flexible scheduling options
• Comprehensive medical, dental, and vision insurance (including dependent coverage support)
• Generous paid time off, including vacation, holidays, sick leave, and volunteer days
• Paid parental leave and long-term sabbatical program
• 401(k) retirement plan with employer matching contributions
• Stock options and long-term incentive opportunities
• Professional development programs, certifications, and educational assistance
• Wellness, internet, and home office stipends
• Inclusive, mission-driven culture focused on collaboration and continuous learning