Cloud Security Engineer, DevSecOps Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cloud Security Engineer developing security measures for AWS and Azure environments at Get Well. Collaborating with engineering teams to enhance cloud security architecture and compliance processes.
Responsibilities:
- Review, improve, and help design secure architectures across AWS and Microsoft Azure environments.
- Implement and maintain cloud security controls related to IAM, network segmentation, encryption, logging, key management, backups, secure configuration, and access control.
- Identify and remediate cloud misconfigurations, excessive permissions, insecure storage, public exposure, weak logging, and missing security controls.
- Partner with engineering and infrastructure teams to integrate security checks and DevSecOps practices into CI/CD workflows.
- Operate and improve vulnerability management processes, including scanning, validation, prioritization, remediation tracking, reporting, and exception review.
- Use security monitoring and telemetry platforms to support alert triage, endpoint visibility, log review, investigation, and detection improvement.
- Support compliance monitoring, evidence collection, control mapping, and audit readiness activities using Vanta and Compyl.
- Map technical controls to compliance requirements, internal policies, customer security expectations, and audit evidence needs.
- Participate in threat modeling and security reviews for new applications, infrastructure changes, cloud deployments, and third-party integrations.
- Support incident response activities, including alert investigation, log analysis, evidence gathering, containment recommendations, and post-incident improvements.
- Improve identity and access management practices, including least privilege, MFA, conditional access, service principals, role reviews, privileged access controls, and access certification support.
- Create and maintain security documentation, cloud security standards, control narratives, runbooks, remediation procedures, and architecture diagrams.
- Support implementation and maintenance of security benchmarks and frameworks such as CIS, NIST, SOC 2, ISO 27001, HIPAA, FedRAMP Moderate, and HITRUST.
- Translate security and compliance requirements into practical technical tasks for engineering, IT, and infrastructure teams.
Requirements:
- 3–5 years of experience in cybersecurity, cloud security, DevOps, infrastructure, systems administration, security operations, compliance operations, or a related technical role.
- Hands-on experience with AWS and/or Microsoft Azure, with the ability to work across both platforms.
- Working knowledge of cloud security concepts, including IAM, network controls, encryption, logging, monitoring, workload security, and shared responsibility models.
- Experience with common AWS security services such as IAM, CloudTrail, CloudWatch, GuardDuty, Security Hub, KMS, Config, S3 security, or VPC controls.
- Experience with common Azure security services such as Microsoft Entra ID, Azure Policy, Defender for Cloud, Key Vault, Network Security Groups, Log Analytics, Sentinel, or related services.
- Experience with vulnerability management tools such as Rapid7 InsightVM, Nexpose, InsightCloudSec, InsightIDR, or similar platforms.
- Experience with SIEM, endpoint monitoring, log analysis, or security telemetry tools such as Wazuh, Rapid7 InsightIDR, Microsoft Sentinel, or similar platforms.
- Familiarity with compliance automation, GRC, or audit readiness platforms such as Vanta, Compyl, or similar tools.
- Ability to interpret vulnerability, cloud posture, endpoint, and compliance findings and prioritize remediation based on risk.
- Working knowledge of secure configuration, patch management, asset inventory, evidence collection, vulnerability remediation, and exception management workflows.
- Basic to intermediate scripting or automation experience using Python, PowerShell, Bash, Terraform, or similar tools.
- Strong communication and documentation skills, including the ability to explain technical risks, write clear procedures, and recommend practical remediation options.
Benefits:
- Exceptionally generous paid time away from work
- A variety of paid leave programs
- Savings opportunities with 401(k) and incentive plans
- Internal education programs
- Full array of health benefits
- Fitness reimbursement
- Cell phone subsidy
- Casual offices with snacks and drinks
- Peer recognition programs
- Health advocacy and employee assistance programs
- Pet insurance
Similar Jobs
DevSecOps Engineer
DevSecOps Engineer responsible for securing software development lifecycle and multi-cloud environments. Collaborating with engineering teams to embed security practices in CI/CD pipelines.
DevOps Engineer, Infrastructure
DevOps Engineer responsible for deploying product updates and addressing production issues. Supporting cloud-native applications and collaborating with Architecture and Engineering teams for Origami Risk.
Associate Site Reliability Engineer
Associate Site Reliability Engineer maintaining service reliability and scalability through agile teamwork at Red Hat. Collaborating and resolving customer issues while contributing to code and quality assurance.
DevOps Engineer, AI, Azure
DevOps & AI Engineer focusing on Azure solutions and Python development. Engaging in automated deployments and collaborating in an agile environment with a strong emphasis on innovation in tech.
Azure DevOps Engineer, ML Ops Engineer
Senior MLOps Engineer at Inallmedia, driving AI-driven automation in DevOps workflows. Collaborating with global teams to architect scalable cloud infrastructure and enhance system reliability.
Senior DevSecOps Engineer
Senior DevSecOps Engineer at Generac managing cloud services and ensuring security and compliance in data handling. Leading efforts in secure cloud infrastructure design and integrating security in development processes.
Staff Azure DevOps Engineer
Staff Azure DevOps Engineer managing Azure infrastructure for healthcare technology company. Focused on security, reliability, and scalability in a cloud-based environment.
Lead SRE – Observability
Lead Site Reliability Engineer enhancing observability and telemetry platform for athenahealth's cloud infrastructure. Collaborating with engineering teams to improve reliability and operational efficiency.
Senior SRE
SRE Sênior supporting the sustainability and monitoring of critical platforms with focus on cloud and Kubernetes. Involvement in the evolution of SRE practices.
Staff Site Reliability Engineer, Core AI Infrastructure
Staff Site Reliability Engineer driving AI transformation by ensuring reliability and automation at Coinbase. Collaborating with infrastructure teams and leading critical incident responses to maintain service excellence.
Senior Site Reliability Engineer, Workforce Identity
Senior Site Reliability Engineer at Coinbase building and scaling identity and access management systems. Owns reliability and DevOps practices for IAM systems.
Senior Site Reliability Engineer, Core AI Infrastructure
Senior Site Reliability Engineer managing AI infrastructure at Coinbase. Driving automation, reliability, and observability in critical AI operations.
Site Reliability Engineer
Senior Site Reliability Engineer responsible for managing Linux infrastructure and system reliability at Harbor Compliance. Design and execute infrastructure strategy supporting operational excellence in a compliance industry.
Senior Engineer, Site Reliability
Senior SRE designing and implementing automation for Syniti's cloud-hosted SaaS platform. Collaborating with multiple teams to ensure compliance and scalability across Azure and AWS environments.
Reliability Engineer
Reliability Engineer at GDIT designing and maintaining infrastructure for federal government services. Collaborating with teams to enhance system reliability and automate deployment processes.
Senior DevOps
Senior DevOps professional in a large insurance company. Supporting development teams in automation and software delivery practices.
Cyber Security Engineer / DevSecOps Engineer
Cyber Security Engineer supporting the design and implementation of secure technology solutions for the federal government. Collaborating on security assessments and maintenance of CI/CD pipelines.
Senior Director, DevOps, AppSec
Lead the global DevOps function and strategy for JD Power as Sr. Director, DevOps & AppSec. Managing a high-performance team for cloud infrastructure and developer experience.
Lead DevOps Engineer
Lead DevOps Engineer responsible for designing and maintaining CI/CD pipelines at NICE. Collaborating with engineering and operations teams to ensure high-quality software delivery.
Lead DevOps Engineer, 6:00 PM - 2:00 AM Shift
DevOps Engineer automating pipelines in a collaborative environment for NICE. Required to coordinate builds, manage release operations, and research new technologies.