cloud security engineer

Apex Technology

<div>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions. 
 
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
 
 
The candidate must hold an active Secret clearance (TS/SCI preferred) and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.<h1 class="jobSectionHeader">
Responsibilities:
</h1><ul><li>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</li><li>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</li><li>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</li><li>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</li><li>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous 
monitoring of cloud resources.</li><li>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</li><li>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</li><li>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</li><li>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or 
modernization initiatives.</li><li>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools, 
processes, and best practices.</li><li>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</li><li>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</li><li>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</li><li>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</li><li>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</li><li>
Ability to be on-site 5 days a week at our office Playa Vista.
</li></ul><h1 class="jobSectionHeader">Requirements:</h1><ul><li>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</li><li>
Must be a U.S. citizen.</li><li>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</li><li>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</li><li>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments. 
 
<h1 class="jobSectionHeader">Technical Skills:</h1><ul><li>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</li><li>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</li><li>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</li><li>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</li><li>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</li></ul></li><li>
Additional Certifications:
<ul><li>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</li></ul></li></ul><h1 class="jobSectionHeader">
Why Join Apex?</h1>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.<h2 class="jobSectionHeader">
What We Offer For Full-time Employees:</h2><ul><li>
Shared upside: Receive equity in Apex, letting you benefit from the work you create</li><li>
Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</li><li>
Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</li><li>
Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%</li><li>
8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel</li><li>
Daily catered lunch and unlimited snacks to keep you fueled throughout the day</li><li>
Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</li><li>
Your dream desk setup and all the tools you need to be your most productive self</li><li>
World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</li><li>
Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</li></ul>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.<h1 class="jobSectionHeader">
Equal Opportunity Employer</h1>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.
Compensation Range: $120K - $170K</div>

Cloud Security Engineer

Multinet Pakistan

Job description:We are seeking a proactive and skilled Cloud Security Engineer with hands-on experience in Fortinet and/or Sangfor firewalls, network security, and cloud infrastructure protection. The ideal candidate will be responsible for the design, implementation, and maintenance of secure and scalable network environments, supporting both LAN/WAN and cloud-based systems.Key Responsibilities:<ul><li>Configure, manage, and maintain next-generation firewalls (Fortinet, Sangfor) and related security devices.</li><li>Design, implement, and manage secure LAN/WAN infrastructure and data communication networks.</li><li>Configure and manage VDOMs, IPSec VPN, SSL VPN, NAT, and PAT policies.</li><li>Troubleshoot and analyze security-related network issues and ensure optimal network performance.</li><li>Create and maintain detailed network design documents, configuration guides, and topology diagrams.</li><li>Ensure compliance with internal security standards and external regulatory requirements.</li><li>Provide proof of concept (POC), solution design, and technical presentations when required.</li><li>Collaborate with internal teams to align network security policies with business goals.</li><li>Stay up to date with the latest network and cloud security trends, tools, and best practices.</li><li>Ensure Service Level Agreements (SLAs) are met in accordance with organizational policies.</li></ul>Required Skills and Experience:<ul><li>1+ years of hands-on experience in network security or cloud security engineering.</li><li>Solid understanding of Fortinet or Sangfor firewall platforms.</li><li>Strong knowledge of routing and switching protocols, including static and dynamic routing.</li><li>Familiar with VDOMs, IPSec/SSL VPNs, NAT/PAT, and advanced firewall features.</li><li>Experience in network design, configuration, and security for LAN/WAN/cloud environments.</li><li>Strong troubleshooting skills for network, VPN, and firewall-related issues.</li><li>Excellent documentation and reporting skills.</li></ul>Pay: Up to Rs50,000.00 per monthWork Location: In person

Steampunk

<div>Overview:
<div>
As a Cloud Security Engineer, you will work within our growing DevSecOps practice delivering features to support developing, testing, and monitoring secure cloud architectures for cloud migration, cloud optimization, and cloud deployment in an AI-enabled software development environment. We are looking for candidates with 3-5 years experience with cloud platform services, cybersecurity and DevOps practices such as infrastructure as code and confirmation management automation.</div>
Contributions:
<div>
Responsibilities include:</div><ul><li>
Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, identity and access management policy, and data privacy</li><li>
Understand the needs of stakeholders and optimize solutions that marry security with usability</li><li>
Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents where appropriate</li><li>
Examine infrastructure as code written by others and analyzing risk</li><li>
Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPPA, FISMA, etc.)</li><li>
Identify technical problems, perform root cause analysis, and develop updates and &lsquo;fixes&rsquo;</li><li>
Automate security processes such as vulnerability management and patch management</li><li>
Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended</li><li>
Support enterprise cloud security through infrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing</li><li>
Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit</li><li>
Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations</li><li>
Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues</li><li>
Act as an individual contributor and mentor more junior team members</li><li>
Engineer and implement solutions and provide recommendations for continuous improvement for the services provided</li><li>
Present regular status updates and provide cross training to other team members</li></ul>
Qualifications:
<div>
Required:</div><ul><li>
Ability to obtain a U.S. government Security Clearance</li><li>
Bachelor's Degree and 5 years of experience</li><li>
3+ years of experience architecting, designing, developing, and implementing cloud solutions</li><li>
3+ years of experience with cloud platforms (i.e. AWS, Azure, or GCP)</li><li>
3+ years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket</li><li>
3+ years of experience with systems development in an Agile environment</li><li>
3+ years of experience implementing infrastructure as code and orchestration</li><li>
3+ years of experience providing conducting monitoring, risk assessment, threat modeling and security testing in cloud environments</li><li>
3+ years of experience documenting POAMs, SSPs, and A&amp;A support documentation</li></ul><div>
Preferred:</div><ul><li>
Certifications:<ul><li>
AWS Certified Security Specialty</li><li>
AWS Certified Solution Solution Architect Associate</li><li>
Microsoft Certified Azure Administrator Associate</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul></li><li>
Excellent written and verbal communication skills, interpersonal and collaborative skills</li><li>
Experience with documenting an as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations preferred</li><li>
Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby</li><li>
Experience with automation tools, including Pivotal, Chef, Terraform, CloudFormation, or Ansible</li></ul>
About steampunk:
<div>
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $100,000 to $175,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk&rsquo;s total compensation package for employees. Learn more about additional Steampunk benefits here.</div><div> 
</div><div>Identity Statement</div><div>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</div><div></div><div> 
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers &ndash; and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.</div></div>

Booz Allen Hamilton

<div>Cloud Security Engineer
The Opportunity:
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.
You Have:<ul><li>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</li><li>
4+ years of experience with secure IT architecture and computing hardware and software</li><li>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</li><li>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</li><li>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</li><li>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</li><li>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</li></ul>
Nice If You Have:<ul><li>
Experience assessing and authorizing network connections between on-premise and cloud</li><li>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</li><li>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</li><li>
Experience with code management tools such as Git or GitLab in a team setting</li><li>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</li><li>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</li><li>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</li><li>
Ability to work independently and as an integrated member of a project team</li><li>
Possession of excellent verbal and written communication skills</li><li>
TS/SCI clearance</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Hex Technologies

SF, NYC, or Remote (USA)
 About the role
 
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
 
About the role: 
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
 Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
 Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
 Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
 Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
 Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
 Mentor engineers and advocate for cloud security across the organization.
 
About you: 
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
 Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
 Expert-level knowledge and hands-on experience with Terraform.
 Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
 Familiarity with CNAPP solutions such as Wiz
 Familiarity with SIEM solutions such as Panther
 Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
 Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
 Bonus points for security certifications from SANS or OffSec.
 Excellent problem-solving, communication, and leadership skills.
 Our Engineering team
 
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
 
How we took down production…
 Beyond Linear Notebooks
 A pragmatic approach to live collaboration
 Our stack
 
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
 
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
 
The salary range for this role is: $200,000 - $265,000
 
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
 
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
 
About Hex
 
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
 
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Echo Global Logistics

<div>Echo is seeking a Principal Cloud Security Engineer to build secure-by-default AWS platform patterns across a growing multi-account environment. This is a senior hands-on engineering role for someone who approaches security as a software and platform problem: building reusable Terraform modules, policy-as-code, deployment guardrails, and paved-road patterns that engineering teams can adopt at scale.
The ideal candidate is equally comfortable with cloud infrastructure, modern application architectures, and developer workflows, and can work credibly across Security, Platform Engineering, Architecture, and software teams. Candidates with roots in software engineering, platform engineering, or SRE who moved deeply into security are especially attractive. The role is expected to raise the security floor through code rather than manual review alone, ensure that critical telemetry and control integrity are built into the environment from the start, and help shape cloud guardrails, logging integrity, and Terraform-first security patterns.
What you will do<ul><li>
Design and implement secure-by-default AWS account, organization, and baseline guardrail patterns across multi-account environments.</li><li>
Build and maintain reusable Terraform modules, policy-as-code, and infrastructure delivery patterns that prevent high-risk actions, reduce drift, and improve traceability.</li><li>
Partner with Platform and Architecture to establish security account, centralized logging, onboarding, identity, and baseline control patterns.</li><li>
Implement and tune Service Control Policies and related preventive controls for high-risk cloud actions.</li><li>
Establish logging integrity protections and detection coverage for tampering with CloudTrail, logging pipelines, and core monitoring controls.</li><li>
Define cloud telemetry standards so security-relevant AWS, EKS, Lambda, and CI/CD workflow events are usable by XSIAM and MDR workflows.</li><li>
Create approved Terraform modules, paved-road patterns, and secure reference architectures for engineering teams.</li><li>
Provide security design input for hybrid and network-connected cloud architectures without becoming the day-to-day firewall backlog owner.</li><li>
Embed security controls into CI/CD and infrastructure delivery workflows so policy validation happens in code paths, not after deployment.</li><li>
Collaborate with Security Operations to improve cloud detection content, alert quality, response workflows, and support automated validation and drift detection for cloud security controls.</li></ul>
What success looks like
In the first 90 days, this role is expected to help establish the AWS security baseline, publish an initial guardrail library, define Terraform module standards, and identify the highest-risk cloud patterns that need to be converted into secure defaults. Over 12 months, success means the organization has adopted reusable cloud security building blocks, high-risk AWS actions are constrained through policy and account design, telemetry is reliable and actionable, and engineering teams can ship through approved paths with materially less manual security friction.
What you bring<ul><li>
8+ years software engineering, platform engineering, SRE, infrastructure engineering, or cloud security, with substantial recent experience building and securing AWS environments through code.</li><li>
Strong hands-on experience in AWS security engineering in multi-account environments</li><li>
Deep experience with infrastructure-as-code, especially Terraform, including reusable modules and tested patterns.</li><li>
Strong software engineering or platform engineering background; ability to write production-quality code in at least one modern language such as C#, Go, Python, Java, or TypeScript</li><li>
Experience with policy-as-code, preventive guardrails, configuration governance, or cloud-native policy enforcement</li><li>
Hands-on experience securing Kubernetes/EKS and serverless patterns in AWS</li><li>
Experience building detective and preventive controls for cloud logging, monitoring, and control plane integrity.</li><li>
Experience partnering with platform and engineering teams in a product-oriented environment through design reviews, pull requests, and developer enablement.</li><li>
Ability to translate risk into practical, durable technical controls and communicate architecture decisions clearly in writing.</li></ul>
Preferred qualifications<ul><li>
Experience integrating cloud telemetry into a SIEM, XDR, or modern SOC platform</li><li>
Familiarity with hybrid connectivity and cloud network controls; experience with Palo Alto or Prisma is helpful but not required.</li><li>
Experience with CI/CD security patterns, reusable modules, and secure platform enablement.</li><li>
Experience securing AI/GenAI services, internal copilots, or agentic workflows in cloud environments.</li></ul>
Echo Global Logistics is a leading provider of technology-enabled transportation management services. As a third-party logistics provider, we simplify transportation management for our clients and carriers, handling crucial tasks so they can focus on what they do best. From coast to coast, dock to dock, and across all major transportation modes, Echo connects businesses that need to ship their products with carriers who transport goods quickly, securely, and cost-effectively.
Why this role matters
Echo&rsquo;s security program is moving toward enforceable, code-driven guardrails and reusable platform patterns in cloud environments rather than relying on point-in-time review and manual process. This role is central to that shift and is expected to define secure implementation patterns that become the default path for engineering teams.
#LI-SG1
Benefits
For more information about our benefit offerings, please visit our careers page at https://www.echo.com/company/careers.
Compensation
$129,352.00-188,077.00 per year
This role is eligible for a bonus that is based on a combination of personal and business performance.</div>

Principal Cloud Security Engineer

Aurora Innovation

<div><div>Who we are
<div>
Aurora's mission is to deliver the benefits of self-driving technology safely, quickly, and broadly.</div><div> 
The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone.</div> 
<div></div>
<div>
At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn.</div></div><div></div> 
What we are looking for

We're searching for a Senior Cloud Security Engineer. You will be part of the Cloud Security engineering team dedicated to building resilient, automated security systems at scale.

Cloud security collaborates with infrastructure and application teams closely. The areas we cover are infrastructure security, workload security, and CI/CD hardening.

Our team is dedicated to building resilient, automated systems at scale. We take a hybrid approach to our toolkit: we utilize the best of open-source (OPA, Trivy, Spire) and COTS products, while still writing custom code to automate workflows and harden our global digital integrity. You'll help us strike the perfect balance between leveraging existing solutions and building custom ones from the ground up.

In this role you will
<ul>
<li>Secure Aurora's cloud environment in the areas of but not limited to:</li>
<li><ul><li>Manage IAM roles and policies</li>
<li>Enforce security controls</li>
<li>Construct security boundaries for resources and services</li>
<li>Provide security guidance involving Cloud and Kubernetes</li>
</ul></li><li>Create automation to solve security problems at the root</li>
<li>Design, build, and configure security infrastructure clouds such as like AWS, Azure, or GCP</li>
<li>Manage the security posture of workloads deployed on Kubernetes environments</li>
</ul>
Required qualifications
<ul>
<li>5+ years of progressive experience in security engineering</li>
<li>Understanding of fundamental security concepts such as Authentication, Authorization, Zero-Trust, and their application to cloud native infrastructure and applications.</li>
<li>Hands-on experience in securing cloud and Kubernetes environments. Experience with Kubernetes admission controllers, vulnerability management, supply-chain security, network security, and use of mTLS and PKI to secure infrastructure.</li>
<li>Ability to design and implement security controls for Kubernetes, including strong knowledge of authorization models, admission controllers, and security best practices.</li>
<li>Understanding of modern Identity and Access Management (IAM) standards and technologies such as OAuth2/OIDC, SAML.</li>
<li>Proficiency in at least one modern programming/scripting language (e.g., Python or Go) for building security automation.</li>
<li>Experience writing and using Terraform.</li>
</ul>
Desirable qualifications
<ul>
<li>Deep fundamental understanding of enterprise-level network security, operating system (Linux), Kubernetes, CI/CD, and application security principles.</li>
<li>Familiarity with compliance frameworks (e.g., SOX, SOC 2, ISO 27001).</li>
<li>Familiarity with machine identity frameworks like SPIFFE/SPIRE, mTLS or equivalent.</li>
</ul>
The base salary range for this position is $162,000 - $235,000 per year. Aurora's pay ranges are determined by role, level, and location. Within the range, the successful candidate's starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.<div>
Working at Aurora 
At Aurora, we bring together extraordinarily talented and experienced people united by the strength of our values. We operate with integrity, set outrageous goals, and build a culture where we win together &mdash; all without any jerks.

We believe in-person work increases collaboration, empathy and our ability to lead effectively. As a result, we operate in a hybrid work environment where Aurorans are in office at least 3 days per week.

Our Careers page provides insight into what it is like to work at Aurora, and you can find all the latest updates in our Newsroom.

Our commitment to safety

At the core of everything we do is our commitment to safety. Building best-in-class self-driving technology will take time, and we believe that each employee at Aurora has a role in contributing to safety, every step of the way. Aurora expects commitment to our safety policies from every employee, and seeks candidates who take an active responsibility, can contribute to building an atmosphere of trust, and invest in the organization's long-term success by prioritizing working safely, no matter what.

Our commitment to inclusion

Aurora considers candidates without regard to their race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. Aurora considers qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at careersiteaccommodations@aurora.tech.

For California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora's California Employment Privacy Policy.</div></div>

Senior Cloud Security Engineer

Search 10000+ Cloud security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 cloud security engineer jobs Near Me

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Principal Cloud Security Engineer

Senior Cloud Security Engineer