Senior Cloud Security Engineer

Responsibilities

• Design and implement cloud security controls across AWS.
• Build security automation using infrastructure as code, APIs, and scripting.
• Lead cloud security posture management and continuous improvement.
• Integrate security into CI/CD pipelines and engineering workflows.
• Develop continuous evidence collection supporting FedRAMP and other continuous compliance initiatives.
• Partner with engineering teams on secure architecture and cloud best practices.
• Improve cloud monitoring, detection, and security metrics.
• Support customer security requirements and compliance initiatives, including SOC 2, ISO 27001, and FedRAMP.

Success Criteria

• Cloud security controls are automated, repeatable, and auditable.
• Continuous evidence collection reduces manual audit effort.
• Security is embedded into engineering workflows.
• AWS security posture improves through measurable automation and engineering-driven controls.
• The organization is positioned to mature toward modern FedRAMP continuous authorization practices.

Requirements and Preferred Qualifications

• AWS cloud security expertise required.
• Direct FedRAMP Moderate or High experience preferred.
• Knowledge and understanding of FedRAMP CR-26 and/or 20x preferred.
• AWS Bedrock experience preferred.
• Infrastructure as code experience, with Terraform preferred.
• Security automation and scripting experience.
• CI/CD security integration experience.
• Cloud detection and monitoring experience.
• Experience supporting regulated SaaS environments and cloud compliance initiatives.

Compensation and Benefits

• Competitive salary.
• Medical, vision, and dental benefits.
• 401(k).
• Stock options.
• HSA contribution.
• Learning stipend.
• Flexible PTO policy.
• Quarterly mental-escape days.
• Generous parental leave policy.
• Home office stipend.
• Mobile phone reimbursement.
• Home internet reimbursement for remote employees.
• Anniversary and milestone celebrations.