Cloud Security Engineer

Cloud Security Engineer

Join IBM Software to apply for the Cloud Security Engineer role. As part of IBM Software, you will work on AI-powered, cloud-native products, contributing to digital transformation globally.

At Hashi Corp, an IBM Company, we enable organizations to provision, secure, connect, and run any infrastructure for any application. The security team ensures the security and integrity of our cloud environments.

• Design and implement solutions that strengthen the security posture of Hashi Corp’s cloud environments (AWS, Azure, GCP and more).
• Monitor and respond to cloud security threats and vulnerabilities, develop mitigations, and communicate associated risks to stakeholders.
• Serve as a subject matter expert (SME) on cloud security best practices, including IAM, network security, container security, and workload protection.
• Contribute to the development and maintenance of security tooling and automation for cloud environments, including CI/CD integrations and vulnerability management systems.
• Research emerging cloud attack vectors and techniques, helping identify potential threats to Hashi Corp’s infrastructure and services.
• Collaborate with cross-functional teams to implement security standards and participate in architecture reviews for cloud deployments.

Bachelor's Degree

• Good understanding of cloud security principles and experience with AWS, Azure, or GCP.
• Hands‑on experience with infrastructure‑as‑code security (Terraform, etc.).
• Knowledge of container security and Kubernetes hardening.
• Experience with vulnerability management and remediation in cloud environments.
• Good written and verbal communication skills, with the ability to influence and educate engineering teams.

• Experience with Cloud Security Posture Management (CSPM) tools;
  Wiz experience is a plus.
• Familiarity with other CSPM or CNAPP solutions (e.g., Prisma Cloud, Lacework, Orca).
• Knowledge of security automation and scripting (Python, Go).
• Exposure to identity and access management (IAM) design and zero‑trust principles.
• Understanding of compliance frameworks (SOC 2, ISO 27001, FedRAMP) and cloud governance.