Cloud Security Engineer

I’m working with a well-funded, YC-backed Series B AI startup that’s looking to hire a Cloud Security Engineer as they continue to scale their product and enterprise customer base.

They’re looking for someone who’s strong across AWS infrastructure and hands-on security — someone who understands how production cloud environments are built, but has also been responsible for finding vulnerabilities, hardening systems, and improving security across the application and infrastructure.

• Own security across a production AWS environment
• Identify and remediate infrastructure, container, dependency, and application vulnerabilities
• Harden cloud infrastructure, APIs, and production services
• Improve IAM, access controls, secrets management, and network security
• Build and improve vulnerability scanning, monitoring, and threat detection
• Work across Docker/container security and infrastructure-as-code
• Partner directly with engineering leadership on security architecture and best practices
• Help strengthen the company’s security posture as they scale with larger enterprise customers

• Strong hands‑on experience with AWS / Amazon Web Services
• Experience securing cloud infrastructure in a production environment
• Experience with vulnerability detection and remediation
• Strong understanding of areas like IAM, WAF, Guard Duty, Security Hub, container security, API security, OWASP, SAST/DAST, CVEs, and dependency scanning
• Experience with Docker and infrastructure-as-code such as Terraform or Cloud Formation
• Comfortable working across both infrastructure and application security
• Startup experience is a plus, particularly if you’ve owned security in a smaller engineering team

This is a hands‑on engineering role rather than a compliance‑focused security position. They’re looking for someone who can actually get into the infrastructure and codebase, identify where the risks are, and help fix them.