Cloud Security Engineer
- Compensation
- Not disclosed
- Location
- US - TX, San Antonio
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- U.S. Citizenship or Green Card required, with the ability to obtain a Public Trust clearance.
- Bachelor’s degree in computer science, cybersecurity, engineering, or a related field; four additional years of relevant experience may be substituted in lieu of a degree.
- Minimum 6 years of relevant experience in cloud security, cybersecurity and AWS security.
- Strong knowledge of AWS services, including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS.
- Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
- Collaborate Hands-on experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
- Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
- Strong scripting or development experience with Python, Bash, or similar languages.
- Proven ability to work independently and collaborate with cross-functional teams to solve complex security, operational, and reliability challenges.
Full description
Job Family:
Software Development & Support
Travel Required:
Up to 10%
Clearance Required:
Ability to Obtain Public Trust
What You Will Do:
- Design, implement, and maintain security controls across AWS cloud environments.
- Safeguard cloud workloads by applying best practices for identity management, monitoring, threat detection, and secure operations.
- Develop secure AWS architectures using services such as IAM, KMS, CloudTrail, Config, and supporting monitoring tools such as Sentry and Datadog.
- Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices.
- Ensure AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2.
- Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services.
- Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation.
- Integrate security into CI/CD pipelines and collaborate with engineering teams to enable secure build and deployment processes.
What You Will Need:
- U.S. Citizenship or Green Card required, with the ability to obtain a Public Trust clearance.
- Bachelor’s degree in computer science, cybersecurity, engineering, or a related field; four additional years of relevant experience may be substituted in lieu of a degree.
- Minimum 6 years of relevant experience in cloud security, cybersecurity and AWS security.
- Strong knowledge of AWS services, including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS.
- Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
- Collaborate Hands-on experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
- Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
- Strong scripting or development experience with Python, Bash, or similar languages.
- Proven ability to work independently and collaborate with cross-functional teams to solve complex security, operational, and reliability challenges.
What Would Be Nice To Have:
- AWS Certified Security – Specialty (Highly desirable).
- AWS Certified Solutions Architect or DevOps Engineer certifications.
- CISSP, CISM or GIAC certifications.