Cloud Security Engineer - Infrastructure - AWS
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
Key details
- Location
- United States
- Work style
- Remote
- Level
- Senior
- Job type
- Full-time
- Experience
- 8–11 yrs
- Function
- Software engineering
- Focus area
- Security
- Posted
- 3d ago
Skills
About the role
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cloud Security Engineer – Infrastructure – AWS based in the United States.
Overview
We are looking for an experienced Cloud Security Engineer to strengthen the security of enterprise cloud infrastructure and AWS environments. In this hands-on role, you will design, implement, and maintain security controls that protect critical systems while enabling engineering teams to innovate efficiently. You will collaborate with Site Reliability Engineering, Platform Engineering, DevOps, Infrastructure, and application development teams to embed security throughout the development lifecycle. From identity and access management to network protection, encryption, and automated compliance, you will help establish secure-by-default architectures. You will also drive Infrastructure-as-Code security practices, improve threat detection capabilities, and develop scalable safeguards that reduce operational risk. This remote opportunity is ideal for a seasoned security professional who enjoys solving complex technical challenges and shaping enterprise security standards.
Accountabilities
-
Cloud Security Engineering: Design, implement, and maintain AWS security controls covering identity and access management, networking, encryption, monitoring, and cloud-native services. Apply least-privilege principles and establish secure configurations across production environments.
-
Infrastructure and Platform Security: Partner with infrastructure, platform, SRE, DevOps, and application teams to integrate security into enterprise platforms. Define secure baselines, hardening standards, reusable guardrails, and preventative controls to strengthen infrastructure resilience.
-
Infrastructure-as-Code and DevSecOps: Develop and maintain security controls using Terraform, CloudFormation, reusable modules, and templates. Integrate automated policy enforcement, vulnerability scanning, configuration validation, and compliance checks into CI/CD pipelines.
-
Cloud Monitoring and Incident Response: Improve the collection, protection, and centralization of cloud security telemetry. Collaborate with Security Operations teams to investigate incidents, strengthen threat detection, and develop automated remediation capabilities.
-
Security Architecture and Risk Management: Conduct architecture reviews, identify vulnerabilities, and translate risk assessments into practical technical safeguards. Develop reference architectures, security patterns, engineering standards, and implementation guidance.
-
Automation and Continuous Improvement: Use scripting and automation to streamline security operations, reduce manual intervention, and improve control effectiveness. Investigate complex technical issues and implement sustainable solutions across cloud and infrastructure environments.
-
Cross-Functional Collaboration: Communicate security risks, business implications, and remediation recommendations to engineers, architects, security specialists, and technology leaders. Manage multiple technical deliverables independently while contributing to shared security objectives.
-
Education and Experience: Bachelor's degree in a technical discipline or equivalent professional experience, with at least eight years of relevant industry experience. Candidates should have seven or more years of direct experience in cloud security engineering, application or product security, or a comparable discipline, alongside at least five years in cloud engineering, infrastructure engineering, DevSecOps, SRE, or related technical fields.
-
AWS Security Expertise: Extensive hands-on experience securing production AWS environments, including IAM policies, roles, trust relationships, permission boundaries, identity federation, cross-account access, and least-privilege design.
-
Cloud Networking: Strong understanding of AWS networking and core network security concepts, including VPCs, subnets, routing, security groups, network ACLs, VPC endpoints, load balancers, DNS, TCP/IP, TLS, firewalls, proxies,
Requirements
Get jobs like this as soon as they're posted
JobSuited checks company career sites all day and ranks every opening against your profile. Free to join.