Senior Security Engineer
Core
Design, implement, and continuously improve cloud security controls across AWS infrastructure, from provisioning to runtime detection and compliance.
Role type
Senior Security Engineer (Cloud Infrastructure)
Builds
Secure AWS environments, CI/CD security pipelines, and cloud-native threat detection systems.
Domain
Cloud Security, AWS, Infrastructure as Code
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
AWS security services (IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC), Kubernetes security (RBAC, pod security, network policies), CSPM/CWPP tools, IaC security (Terraform, CloudFormation), SIEM and detection engineering, Python/Bash scripting, IAM fundamentals (least privilege, federated identity), multi-cloud exposure (Azure/GCP), security frameworks (MITRE ATT&CK, CIS Benchmarks, NIST CSF, SOC 2, ISO 27001)
Preferred skills
Security certifications (ISC2, ISACA, SANS, CompTIA, AWS Security Specialty, AWS Solutions Architect)
Technologies
AWS, Kubernetes, Terraform, CloudFormation, CloudTrail, GuardDuty, SIEM, Python, Bash
Responsibilities
Define and enforce secure account structures and baseline configurations across multi-account AWS setups; integrate security controls into IaC workflows and CI/CD pipelines; participate in on-call rotation for security incident triage, containment, and root cause analysis; build and maintain detection coverage for cloud-native threats using CloudTrail, GuardDuty, and SIEM; manage vulnerability assessments and drive automated remediation; define and enforce least-privilege principles across IAM and service accounts; develop security best practices, policies, and documentation.
Seniority
Senior, hands-on IC