Senior Cloud Security Engineer

Senior Cloud Security Engineer# Careers## Senior Cloud Security Engineer Apply:
Hybrid - In office 3 days per week:
Holmdel:
Bethlehem:
New York:
Full time:
Posted Yesterday:
R
** Position Summary
*** Do you want to help engineer the cloud security capabilities that protect Guardian’s applications, data, and technology as we continue to expand our use of AWS?
* Guardian is seeking a Senior Cloud Security Engineer to implement and continuously improve security capabilities across our cloud environment.
* Reporting to the Head of Security Platforms, this role will serve as a senior technical contributor across Cloud-Native Application Protection (CNAPP), Cloud Security Posture Management (CSPM), AWS-native identity security controls and services, Public Key Infrastructure (PKI), and other cloud security controls within a complex, highly regulated environment.
* This role is responsible for translating security and architecture requirements into scalable engineering solutions, strengthening controls across the cloud lifecycle from code to runtime, and helping teams identify and address cloud security risk.
* The successful candidate will partner closely with Cloud Engineering, Dev Ops, Architecture, Cybersecurity, Compliance, and application teams to automate security controls, perform advanced threat and security analysis, improve cloud security posture, and enable the secure adoption of AWS services.
** You are
*** A hands-on cloud security engineer who can translate complex security requirements into practical, scalable solutions.
* Experienced working across cloud engineering, cybersecurity, architecture, Dev Ops, and application teams to solve security challenges without creating unnecessary friction.
* Analytical and curious, with the ability to assess cloud security risks, identify gaps, and drive technical improvements from design through runtime.
* Comfortable operating in a complex, fast-paced environment, balancing multiple priorities while maintaining a strong focus on security, resiliency, and compliance.
* A strong communicator who can explain technical risks and solutions to both technical and non-technical stakeholders.
* Passionate about staying current with emerging cloud threats, security technologies, and engineering practices.
* Bold, relentless, curious, and collaborative, with a desire to make an impact as part of a transformational organization.
** You have (Required Qualifications**):
* 5+ years of experience in IT, cybersecurity, cloud engineering, or related disciplines.
* 5+ years of hands-on AWS security experience, including strong knowledge of IAM, PKI, CSPM, and CNAPP capabilities.
* Hands-on experience designing and implementing AWS identity controls, including IAM Identity Center, least-privilege policies, Service Control Policies (SCPs), cross-account access, and RBAC/ABAC models.
* Experience deploying and managing AWS Key Management Service (KMS), AWS Certificate Manager (ACM), and enterprise PKI capabilities.
* Experience implementing or operating CNAPP and CSPM platforms, such as Wiz, Prisma Cloud, and AWS Security Hub for posture management, workload protection, risk prioritization, and remediation.
* Strong understanding of cloud security principles, including zero trust, encryption at rest and in transit, workload and container security, identity boundaries, and network security.
* Experience with Infrastructure as Code (IaC) and security automation using technologies such as Terraform, Cloud Formation, CI/CD pipelines, and shift-left security practices.
* Experience with security and compliance frameworks such as NIST, CIS, SOC 2, SOX, NYDFS, and Model Audit Rule (MAR), as well as the AWS Well-Architected Framework Security Pillar.
*
* Preferred Qualifications:

*** A…