Security Engineer

As a Cloud Security Engineer, the primary role is to support the security of our cloud environments across AWS, GCP, and Azure. This involves identifying and mitigating security risks using cloud‑native security tools, integrating security into the software development lifecycle, maintaining threat models, ensuring compliance with regulatory requirements, and responding to security queries and client partner questionnaires. Familiarity with cloud security platforms such as CNAPP, CSPM, CWPP, CASB, CIEM, and the Wiz tool is beneficial.

• Assist in evaluating, reviewing, and deploying cloud native security tools in AWS and Azure.
• Support monitoring, configuring rules, and enforcement using cloud security platforms such as CNAPP, CSPM, CWPP, CASB, and CIEM.
• Utilize the Wiz tool for cloud security posture management, including configuration analysis, vulnerability detection, and compliance monitoring.
• Support selection and acquisition of additional security solutions or enhancements to improve overall enterprise security.
• Collaborate with development, operations, and security teams to embed security throughout all phases of the software development lifecycle.
• Develop and maintain threat models for cloud environments and train engineering teams in attacker‑risk‑driven design.
• Partner with infrastructure, application, and other stakeholders to minimize security and privacy risks.
• Recommend actions to management to ensure compliance with security and regulatory requirements.
• Suggest risk mitigation actions that impact existing IT and information management.
• Craft responses to client and partner security questionnaires.
• Other duties as assigned.

• B.A. or B.S. in Computer Science or a similar engineering program, or equivalent experience.
• 3‑5 years of cloud information security experience focusing on AWS, GCP, and Azure.
• AWS Security, CISSP, CISA, OSCP or other information security certification (plus).
• Experience performing security reviews of cloud application designs, source code, and deployments.
• Staying up‑to‑date on the latest cloud security advisories, alerts, and vulnerabilities.
• Strong verbal and written communication skills and attention to detail.
• Familiarity with AWS services such as EC2, ECS, WAF, VPC, IAM and cloud security platforms CNAPP, CSPM, CWPP, CASB, and CIEM.
• Experience with IaC tools like Terraform or Cloud Formation.
• Comfortable with Python and ability to read Java for cloud security scripting and automation.
• Proven team experience and ability to collaborate in a team‑oriented environment.
• Passion for working with cloud technology and creating high‑quality, secure consumer technology products.

• Competitive pay and benefits including subsidized medical plan options, HSA with generous company contribution, 401(k) with employer match.
• Paid holidays, wellness time, and vacation that increase with tenure.
• Paid maternity and bonding leave, company‑paid disability and life insurance.
• Flexible spending accounts (FSA) and well‑being resources.
• Casual dress work environment.

is an Equal Opportunity Employer.