Cloud Security Engineer

Job Description Screen Engine/ASI — the leading technology innovator in media and entertainment market research, is seeking a Cloud Security Engineer to help secure, monitor, and improve our cloud-first technology environment. Work Arrangement:
Hybrid – Primarily remote (Greater Los Angeles area) with bi-weekly on-site presence at our Valley Village office for in-person collaboration, meetings, project work, and on-site coverage when needed.

As a Cloud Security Engineer, you will support the design, implementation, and day-to-day administration of secure cloud infrastructure with a strong emphasis on AWS, identity and access management, and security auditing. This role’s primary focus is AWS cloud security, IAM configuration and governance, security operations, and audit participation and remediation. Secondary responsibilities include Tier 2/3 support and broader enterprise security support as needed, including acting as on-site backup when the IT Director is unavailable and in-office presence is required.

The ideal candidate brings a solid foundation in AWS and cloud security, strong attention to detail, and an interest in growing further in cloud security engineering. Over time, this role is expected to expand in scope toward broader Dev Ops engineering capabilities, practical AI adoption, greater ownership of security initiatives, and the ability to back up the IT Director in administering core productivity and collaboration environments during planned absences.

• Support the administration and security of AWS cloud infrastructure including IAM, VPC, EC2, RDS, Cloud Watch, VPN, routing, and CIDR/IP range management.
• Administer AWS IAM policies, roles, groups, and least-privilege access controls.
• Support identity governance activities including access reviews, permission cleanup, role-based access alignment, SSO integrations, MFA, and related identity security controls.
• Support cloud security monitoring, alert triage, vulnerability follow-up, and incident response activities.
• Help enforce cloud security standards, secure configuration baselines, and least-privilege practices.
• Participate in regular security audits across cloud infrastructure, identity systems, endpoints, and SaaS platforms.
• Document audit findings, control gaps, remediation actions, and maintain audit evidence and security documentation.
• Track remediation efforts and support alignment of security controls with established frameworks such as SOC 2, NIST CSF, ISO 27001, and CCPA.
• Assist with AWS infrastructure monitoring, alerting, and operational visibility using Cloud Watch dashboards, alerts, and notifications.
• Support AWS billing review, cost visibility, and optimization tracking.
• Assist with infrastructure configuration and automation using Terraform and AWS Systems Manager (SSM).

• Provide Tier 2/3 technical support for cloud systems, identity platforms, remote access, and security-related issues escalated from frontline support.
• Support end users and internal teams with Tier 2/3 access, authentication, device, and connectivity issues that require deeper cloud or security expertise.
• Troubleshoot service interruptions, coordinate follow-up actions, and communicate updates to stakeholders while partnering with frontline support on issue resolution.
• Work on both escalated support tickets and larger cloud/security projects (e.g., IAM redesign, audit remediation, security tooling rollouts).
• Collaborate with the help desk / frontline support function to ensure efficient handoff of Tier 1 versus Tier 2/3 issues as business needs require.
• Support the administration and continuous improvement of enterprise security controls across cloud, identity, endpoint, collaboration, and SaaS environments.
• Participate in organization-wide security initiatives including policy implementation, security reviews, risk reduction efforts, and remediation tracking.
• Help assess security posture across business systems and contribute to recommendations that improve overall enterprise security resilience.
• Serve as an on-site backup to the IT…