Staff Cloud Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Cloud Security Engineer hardening AWS infrastructure and CI/CD for Beyond Finance, helping Americans escape crippling debt. Owning Wiz-based cloud security and vulnerability management.
Responsibilities:
- Harden the security posture of the AWS environment and software development pipeline
- Own cloud security posture across AWS using Wiz and AWS-native services, reducing risk across IAM, network segmentation, container security, secrets, and data exposure
- Establish secure defaults in Infrastructure as Code through reusable modules, guardrails, and policy as code
- Harden CI/CD pipelines in partnership with DevOps
- Run vulnerability management across cloud and application findings, including intake, prioritization, SLA tracking, and remediation
- Build scalable automation for ingestion, deduplication, prioritization, and developer-facing workflows
- Instrument telemetry, alerting, and runbooks for owned systems
- Operate and tune the WAF, including managed and custom rules, rate limiting, and bot mitigation
- Partner with DevOps, Engineering, and the Application Security Engineer on preventative controls and application security work
Requirements:
- 8+ years of hands-on security engineering across cloud security and vulnerability management
- Strong AWS security background, including IAM, networking, container orchestration, and logging and audit
- Hands-on experience securing CI/CD pipelines and Infrastructure as Code
- Terraform required
- Experience running or substantially contributing to a vulnerability management program
- Working knowledge of OWASP Top 10 and threat modeling
- Experience with Wiz, Cloudflare, GitHub Advanced Security, Spacelift, or AWS-native services is nice to have
- Production WAF experience is nice to have
- AI/ML security exposure is nice to have
- Experience with secrets management platforms is nice to have
- Identity security experience is nice to have
- PCI-regulated or financial services experience is nice to have
- Familiarity with Ruby on Rails, Python, or Go is nice to have
- Ability to operate independently and drive projects without day-to-day oversight
Benefits:
- Considerable employer contributions for health, dental, and vision programs
- Generous PTO, paid holidays, and paid parental leave
- 401(k) matching program
- Merit advancement opportunities
- Career development & training
- Annual bonus eligibility
Similar Jobs
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.
Cybersecurity Co-Founder / CCO
Cybersecurity co-founder owning and scaling a startup with EWOR, a venture builder supporting entrepreneurs through founder coaching, hiring, distribution, and funding.
Infrastructure & Security Engineer
Infrastructure & Security Engineer securing Microsoft 365, Azure, and client environments for Mechanicus, a security-focused managed service provider. Leading incident response, cloud engineering, hardening, and Tier 3 escalations remotely across the US.
Facility Security Officer
Facility Security Officer managing personnel clearances, facility security, and compliance for AppGate's federal Zero Trust cybersecurity platform. Supporting cleared defense programs, audits, and classified information protection.
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.
Engenheiro de Segurança do Trabalho
Engenheiro de Segurança do Trabalho remoto apoiando gestão de contingência e emergências na Petrobras. Elaborando planos, painéis Power BI, treinamentos, auditorias e análises de risco de processo.
Senior Agentic AI Specialist – Integrations, Security and Continuous Evolution
Especialista sênior evoluindo a plataforma AIDA de IA agêntica para integrações corporativas seguras. Implementando RAG, controles de segurança, validações e monitoramento contínuo dos agentes.
Senior Security Engineer
Senior Security Engineer developing and securing enterprise, cloud, and infrastructure cybersecurity solutions for European public-sector clients. Automating operations, hardening systems, and resolving security issues.
Senior Security Engineer, Data Loss Prevention
Senior Security Engineer protecting Fragomen’s immigration law firm data through enterprise DLP controls. Investigating exposure risks and integrating Microsoft 365, cloud, SaaS, endpoint, and SIEM security capabilities.
Security Systems Installation
Sr. Coordinator supporting Interface Systems’ managed business security installations. Troubleshooting Access Control, CCTV/VMS, alarms, and low-voltage systems for field technicians.