# Cloud Security Engineer

**Company:** [WorkWave](https://hotfix.jobs/companies/workwave)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $120k – $145k/yr
**Experience:** 5+ years
**Skills:** AWS, Terraform, IAM, Guardduty, Aws Inspector, EKS, ECS, Azure, Kubernetes, Cloudtrail, Security Hub, Aws Waf, Secrets Manager, Kms, Cspm
**Posted:** 2026-03-27

> Cloud Security Engineer leads secure cloud configurations in AWS (primary), Azure, and GCP, owning governance, IAM, vulnerability management, and secure-by-default patterns for engineering teams. Requires 5+ years experience with deep AWS security expertise and Terraform proficiency.

## Job Description

## Responsibilities

**Cloud Governance & Guardrails**
- Lead deployment and optimization of AWS Control Tower, Security Hub, and AWS WAF for secure multi-account strategy.

**Cloud Security Platform Ownership**
- Own security outcomes across AWS (primary), Azure (secondary), and limited GCP, including landing zone standards, guardrails-as-code, detection, and remediation automation.

**Secure-by-Default Engineering**
- Design reusable secure cloud patterns, hardened Terraform modules, reference architectures, and baseline configurations.

**Container Security**
- Secure EKS and ECS environments with runtime protection, image scanning, and least-privilege orchestration.

**Security Assessment & Roadmap**
- Perform baseline assessments, identify gaps, and provide prioritized recommendations.

**Identity & Access Management**
- Design and enforce least-privilege IAM across AWS accounts and workloads.

**Operational Excellence**
- Develop secure configuration standards, documentation, and procedures.

**Detection & Telemetry Ownership**
- Ensure complete, centralized security telemetry (CloudTrail, GuardDuty, VPC Flow logs).

**Cloud Security & Compliance Alignment**
- Align configurations with ISO 27001, SOC 2; automate evidence collection.

**Third-Party Integration**
- Manage secure access for security vendor tools.

**Incident Response**
- Participate in on-call rotation; serve as SME for cloud security incidents.

**Vulnerability & Exposure Management**
- Build cloud vulnerability program with SLAs, scanning, and patch workflows (AWS Inspector, ECR).

**Cloud Security Tooling Ownership**
- Onboard and tune CSPM and MDR integrations.

**Secrets, Keys, and Credential Hygiene**
- Implement secure secrets management (Secrets Manager, Parameter Store, Vault), KMS strategy.

**CI/CD and Supply Chain Security**
- Secure software delivery pipeline with policy-as-code, artifact integrity.

**Cloud Incident Readiness & Exercises**
- Build playbooks and run tabletop exercises.

**Multi-Cloud & Hybrid Baselines**
- Establish security baselines for Azure, GCP, hybrid connectivity.

**Security Metrics & Continuous Improvement**
- Define and report key metrics.

**Leadership and Execution**
- Mentor engineers and provide enablement.

## Requirements

- 5–8+ years in Information Security, 3+ years AWS Cloud Security.
- Deep AWS experience: IAM, VPC, S3, KMS, GuardDuty, Inspector, Config.
- Strong Terraform for IaC.
- Experience securing EKS/ECS.
- Basic Azure security knowledge.
- Consultative mindset, collaborative, automation-focused.
- Bachelor’s degree in CS, InfoSec, or equivalent.
- Desirable: AWS Certified Security – Specialty, Azure security certs.

## Similar roles

- [Security & Compliance Operations Manager](https://hotfix.jobs/jobs/90ac6643-526f-4aeb-bb4f-d71bc1af1fcd) - Mintlify - San Francisco, CA - $120k – $180k/yr
- [Product Security Manager](https://hotfix.jobs/jobs/e6c7e91d-a178-4872-8fa5-f6af356137a5) - Northwood Space - Los Angeles, CA - $120k – $190k/yr
- [Security Engineer, Platform](https://hotfix.jobs/jobs/9b7bcfc9-794a-41cb-87d5-a10b2e936fc2) - Resend - Remote - $120k – $140k/yr
- [Security engineer, application security](https://hotfix.jobs/jobs/9628b13e-773c-473a-9e94-16d7d5cf2900) - Writer - New York, NY - $119k – $210k/yr
- [System Safety Engineer, Autonomy Trucking](https://hotfix.jobs/jobs/c0bddf4e-fb45-4eb3-858f-068e881e5c48) - Applied Intuition - Sunnyvale, CA - $118k – $250k/yr

**Apply:** https://hotfix.jobs/jobs/d46a9bb9-c703-4b78-8ad4-97ec5891b112
**Canonical:** https://hotfix.jobs/jobs/d46a9bb9-c703-4b78-8ad4-97ec5891b112