Security Engineer
The Security Engineer will secure cloud, CI/CD, and production environments through threat modeling, vulnerability management, detection and response, and DevSecOps collaboration. The role requires 5+ years of cloud security experience and expertise with AWS, Kubernetes, IAM, infrastructure as code, and automation.
About the job
Responsibilities
- Lead threat modeling and security review exercises across production and CI/CD environments, identifying and mitigating risks in products and supporting cloud services.
- Drive vulnerability management and remediation efforts by prioritizing issues, implementing mitigations, and designing preventative controls.
- Extend detection and response capabilities by building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
- Collaborate with the Federal team to extend DevSecOps and product security practices to the FedRAMP environment and meet key security requirements.
- Partner with engineering and operations teams to deliver secure-by-design solutions.
Requirements
- 5+ years of experience in security engineering or security operations in cloud environments.
- Experience with AWS platforms and services; equivalent Azure or Google Cloud experience may be considered.
- Experience with Kubernetes, AWS EKS, and container infrastructure.
- Experience with IAM and managing cloud identities at scale.
- Experience securely developing and applying infrastructure-as-code solutions using Terraform and Helm.
- Experience with cloud-native observability and management tools.
- Experience building automation and tooling with one or more of Python, Go, Shell, HCL, or Rego.
Nice-to-haves
- Bachelor's degree in computer science or a related field, or equivalent professional experience.
- Experience working with remote, globally distributed teams.
- Experience in organizations that develop software or operate managed infrastructure and technology services.
- Experience with CNAPP, CSPM, or CIEM solutions.
Skills
AWS, Azure, GCP, Kubernetes, Aws Eks, Docker, IAM, Terraform, Helm, Python, Go, Shell, Hcl, Rego, Cnapp
Similar jobs
Security Engineering jobs
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Wiz
Tel Aviv, Israel
Conduct end-to-end security research on emerging threats, CVEs, misconfigurations, and cloud attack surfaces, then turn findings into scalable detection capabilities. Requires at least five years of security research or related experience, strong scripting skills, and expertise in network and application security.
Vanta
Remote
Leads a global Security Operations team, setting detection, response, and security strategy while driving incident response and risk remediation. The role requires strong SaaS and cloud security experience, leadership ability, familiarity with major security standards, and responsible use of AI.
Viz.ai
Tel Aviv, Israel
Leads information security governance, compliance, security operations, risk management, and incident response for a healthcare AI company. Requires 5+ years of security experience and hands-on expertise with major compliance frameworks, SIEM, incident response, and third-party risk.
Monarch
Remote
Own and scale security governance, risk, compliance, and customer assurance programs, including audits, controls monitoring, third-party risk, policies, and security questionnaires. The role requires 3–5 years of security GRC experience and hands-on understanding of IAM, endpoint, and cloud controls.