Information Security Engineer – Cloud

Job Title: Information Security Engineer – Cloud
Location: Remote
The base salary range for this position is $150,000 – 250,000 per year, depending on experience

Nice to Haves

• Relevant industry certifications (e.g., CISSP, CCSP, AWS/GCP Security Specialist).
• Experience in a high-growth, fast-paced technology environment.
• Experience in securing containerised workloads (Docker, Kubernetes).
• Experience securing high-performance computing (HPC) or AI/ML workloads.
• Experience with a modern SIEM solution (e.g., Splunk, Elastic, Sentinel).
• Hands-on experience securing large-scale Kubernetes clusters running mission-critical workloads
• Track record of balancing pragmatism with high standards of security and resilience.
• Design, implement, and manage robust Identity and Access Management (IAM) policies and systems across cloud environments (e.g., AWS, GCP, etc) and on-prem infrastructure by coordinating with our internal Corporate IT and Security for centralized identity management.
• Align comprehensive cloud and production security logging, monitoring, and alerting to detect and respond to threats in real-time with Corporate EDR, MDR, SIEM, and SOAR tooling.
• Integrate security tools and processes into the CI/CD pipeline (DevSecOps) to ensure security is built-in from the start.
• Review security assessments, penetration testing results, and vulnerability scans and remediate them based on severity.
• Collaborate with engineering teams to provide security guidance and enforce best practices.
• Work with Legal, GRC, and GTM teams to meet customer and regulatory security requirements (SOC 2, ISO 27001, NIST 800-53, and FedRAMP Moderate).
• Maintain up-to-date documentation on incidents, runbooks, processes, and procedures relevant to cloud and product security.

About You

• 7+ years of experience in Information Security, with at least 3 years focused on public cloud security (AWS, GCP).
• Deep expertise in IAM, networking (VPC, subnets, routing, firewall rules), and logging/monitoring services.
• Hands-on experience with infrastructure-as-code tools (e.g., Terraform, CloudFormation).
• Experience with security tools such as HashiCorp Vault, Snyk, CrowdStrike, Wiz, or equivalent.
• Proficiency in at least one scripting language (e.g., Python, Bash).

Strong understanding of security frameworks, such as NIST, CIS, ISO, and FedRAMP