Senior Cloud Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Responsibilities:
- Own the security of an AWS supply chain and shipment management platform end to end
- Design and maintain a multi-account AWS Organizations setup with organization-wide CloudTrail and log archive, delegated GuardDuty, Security Hub and Config, and service control policies
- Implement threat detection and high-risk change alerting across all accounts and regions
- Handle alert triage, security on-call and incident response
- Route Security Hub, Inspector and SonarQube findings to tickets, conduct weekly reviews and agree patch plans with DevOps
- Manage short-lived, role-based credentials for people and automation
- Conduct privileged access reviews across IAM Identity Center and Keycloak and harden Keycloak
- Create incident runbooks, conduct tabletop exercises and test backup restores, including ransomware scenarios
- Implement DNS filtering, secrets management, encryption in transit and at rest, and maintain a minimal external attack surface
- Manage quarterly external penetration tests, customer security questionnaires and audits, and AWS partner reviews
- Review infrastructure and application changes for security and keep policies current
- Build and tune AI-assisted security triage agents with humans approving every proposed action
- Report to the CTO and work with DevOps and development teams to address findings
Requirements:
- 6+ years in security or infrastructure engineering, with at least 3 years hands-on securing production AWS environments
- Ability to work autonomously: set priorities, make decisions and see them through
- Deep AWS security knowledge: IAM and Organizations (SCPs, Identity Center, cross-account roles), CloudTrail, GuardDuty, Security Hub, Config, Inspector, KMS, Secrets Manager, VPC and network controls
- Ability to write and review production Terraform
- Scripting in Python or Bash for automation and investigations
- Experience leading real incidents from first alert through containment and post-mortem
- Experience with SSO, MFA, least privilege and access reviews
- Experience with Keycloak or another OIDC/SAML provider
- Experience producing evidence for SOC 2, ISO 27001 or similar and answering enterprise customers' security questionnaires
- Ability to explain risk plainly to engineers and executives
- Ability to get fixes done through other teams without authority over them
- Fluent written English
Benefits:
- Paid Vacation days: 24 working days
- Paid Sick days: 15 working days
- The opportunity to dedicate up to 10% of working hours for self-education and personal development
- BYOD program (Bring Your Own Device)
Similar Jobs
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.