Cloud Security Engineer

Ready to be a Titan? We are seeking an experienced Staff Cloud Security Engineer to shape the security foundation of our modern cloud environments and next-generation applications. In this high-impact role, you will design cutting-edge automated security controls, harden multi-cloud infrastructure, and champion secure development practices across the organization. If you are passionate about cloud security, Dev Sec Ops , and staying ahead of emerging threats, this role puts you right at the center of innovation.

• Dev Sec Ops  and Automation Pipeline Integration:
  Integrate robust security controls directly into CI/CD platforms such as Git Hub, Git Lab, Jenkins, or Azure Dev Ops.
• Automated Scanning:
  Evaluate and implement pipeline-based security Infrastructure as Code (IaC) scanning. Manage and configure IaC scanning tools to surface true risk.
• Developer Feedback Loops:
  Build and optimize developer feedback loops and automated remediation workflows to ensure software is secure by default. Develop automated scripts using Python, Bash, or Power Shell to streamline security processes.
• Identity and Access Management (IAM) Cloud Identity Controls:
  Build and maintain IAM security controls across cloud platforms, assessing policies to enforce the principle of least privilege.
• Non-Human Identity Management:
  Standardize management, security controls, and lifecycle expectations with regard to non-human identity.
• Secrets Management:
  Govern the secure use of cloud identities, Application Programming Interfaces (APIs), and secrets management.
• Infrastructure Security and Hardening Cloud Posture:
  Develop and implement secure infrastructure baselines, vulnerability management processes, and hardening standards across AWS, Azure, or GCP environments.
• Infrastructure as Code (IaC):
  Validate security configurations and leverage IaC tools like Terraform, Cloud Formation, or Bicep to ensure repeatable, auditable, and secure infrastructure provisioning.
• Network Security:
  Tackle high-impact infrastructure projects such as multi-cloud network isolation, secure multi-tenant use, and continuous remediation of discovered misconfigurations.
• Workload Security Cloud-Native Architectures:
  Guide engineering teams on secure architecture design for cloud apps, microservices, serverless services, and PaaS workloads.
• Container Security:
  Advance container and Kubernetes security by implementing runtime controls, supply-chain security, and configuration assessments.
• AI & Emerging Tech:
  Secure in-house and public AI/ML systems against cyber threats, adversarial attacks, and unauthorized access, ensuring models and data pipelines are protected throughout the solution lifecycle.
• Data Security and Privacy Data Protection:
  Ensure that sensitive cloud and AI data is properly encrypted, anonymized, and securely stored.
• Encryption Standards:
  Assess and implement strong encryption configurations, checkpoint encryption, and tokenization to protect data at rest and in transit.
• Compliance Alignment:
  Develop and enforce policies to align data security and privacy measures with industry regulations, ethical standards, and organizational governance requirements.
• Telemetry & Visibility:
  Partner with Security Operations to improve cloud application telemetry, logging, and observability. Help expand monitoring capabilities by onboarding log sources and building detection rules for cloud-based threats.
• Threat Detection:
  Monitor and analyze security events using SIEM, Cloud Security Posture Management (CSPM), and Cloud Workload Protection Platforms (CWPP).
• Incident Response:
  Support the triage, investigation, and forensic analysis of cloud-based application or pipeline security incidents, working collaboratively to contain and mitigate threats.

• Experience:
  
  7-10+ years of hands-on experience in cloud security, application security, Dev Sec Ops , or related engineering roles.
• Cloud Expertise:
  Deep hands-on experience with Azure and/or AWS security services, including the design and maintenance of multi-cloud application controls.
• Technical
  
  Skills:
  
  Proficiency in scripting (Python, Bash, Power Shell) to automate security tasks. Strong understanding of container security (Docker, Kubernetes) and IaC security (Terraform, ARM).
• Certifications:
  
  Industry certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, GCSA, or OSCP are highly preferred.

Transformative Impact:
You will have a proactive, "builder" mindset with a passion for improving processes and reducing risk, directly driving scalable solutions across our real-world infrastructure.

Cross-Functional Collaboration:

You will work closely with diverse engineering, Dev Ops, and product teams to ensure secure solution delivery, translating complex security concepts for both technical and non-technical stakeholders.

Continuous Growth:
Join a dynamic team where you will continuously adapt to evolving challenges, stay ahead of emerging cloud threats, and explore the secure…