Skip to content
Applied IntuitionApplied IntuitionSunnyvale, CA

Cloud Security Engineer

Secures multi-cloud infrastructure (AWS, Azure, GCP, OCI) with emphasis on Kubernetes hardening, IAM enforcement, CSPM using Wiz, and IaC security. Requires 5+ years experience, deep AWS and Kubernetes security expertise.

125k – 160k
On-site5+ YOESecurity Engineering

About the role

Responsibilities

  • Securely deploy and maintain infrastructure across multi-cloud environments (AWS, Azure, GCP, OCI), establishing cloud-specific guardrails to prevent insecure deployments and configurations.
  • Implement and enforce security best practices for Cloud native Kubernetes clusters, including granular RBAC, network policies, and admission controllers.
  • Develop, implement, and enforce IAM policies and procedures across all systems, managing user identities and enforcing least privilege.
  • Ensure security of container images, registries, and runtime environments using Docker, Podman, and container scanning solutions.
  • Manage infrastructure and security policies through IaC tools such as Terraform, CloudFormation, or AWS CDK.
  • Maintain CSPM tools such as Wiz to detect and remediate misconfigurations and compliance drifts.
  • Automate compliance checks and generate audit evidence across multi-cloud environments.
  • Monitor and protect running applications and containers from runtime threats.

Requirements

  • 5+ years of industry experience in software engineering or security engineering, focusing on secure, production-grade cloud systems.
  • Extensive experience with Kubernetes security (securing workloads, RBAC, cloud-native secret management).
  • Deep operational security experience with AWS (mandatory), preferred experience with Azure, GCP, or OCI.
  • Proficiency in IaC tools: Terraform, CloudFormation, or AWS CDK.
  • Hands-on expertise with CSPM platforms like Wiz.
  • Strong background in IAM and least-privilege architectures across multi-cloud and on-premises environments.
  • Experience with container security, image scanning, and runtime protection tools.

Nice to Haves

  • Certifications: AWS Certified Security – Specialty, CKS, CKA.
  • Proficiency in Go/Golang, Python, or C++ for security automation.
  • Experience automating compliance frameworks and audit evidence generation.
  • Experience in air-gapped or constrained on-premises environments.

Compensation

Base salary range: $125,000 - $160,000 USD annually, plus equity and benefits.

Skills

KubernetesAWSTerraformWizIAMRBACDockerCloudFormationAws CdkAzureGCPOciPodman

Similar roles

Security Engineering jobs
Applied Intuition

Product Security Engineer

Applied IntuitionSunnyvale, CA

Embeds security into product design and development lifecycle by analyzing architectures, conducting threat modeling and assessments, maturing vulnerability management, and guiding developers on secure practices. Requires 5+ years in product/application security with expertise in cloud, containers, and automation tools.

125k – 160k
On-site5+ YOESecurity Engineering
Trail of Bits

Security Engineer, Research & Engineering

Trail of BitsUnited States

Designs and builds security tools and frameworks in Rust, C++, Python for AI/ML, compilers, and low-level systems. Contributes to open-source, performs code reviews, and communicates findings via blogs and presentations.

125k – 185k
RemoteSecurity Engineering
Socket

Threat Analyst

SocketUnited States

Analyzes software supply chain threats using AI scanners, conducts malware analysis and threat hunting, builds automation tools, and integrates research into products to protect open source ecosystems. Requires 3+ years in security operations and master's degree.

126k – 170k
Remote3+ YOESecurity Engineering
Pinterest

Security Software Engineer II, Detection and Response

PinterestSan Francisco, CA

Build and improve detection alerts, automation, logging pipelines, and internal tooling to identify and respond to security threats at Pinterest. Requires strong incident response, SIEM, threat hunting, and scripting skills in cloud environments, plus demonstrated responsible use of AI.

124k – 255k
Remote5+ YOESecurity Engineering
Mintlify

Security & Compliance Operations Manager

MintlifySan Francisco, CA

Own and run Mintlify's end-to-end security and compliance programs (SOC 2, ISO 27001/42001, GDPR, Microsoft SSPA) as the first dedicated GRC Program Manager. Administer Drata, manage audits/vendors/evidence, handle customer-facing compliance, and coordinate with engineering.

120k – 180k
On-site3+ YOESecurity Engineering