Senior Cloud Security Engineer

Role Overview

Join Incode as a Senior Cloud Security Engineer to architect and operationalize a forward-leaning cloud security program. You will help prevent, detect, and respond to threats across a multi-cloud, hybrid, and private environment, partnering with Security, Compliance, SRE, and Product Engineering.

Key Missions

• Architect and operationalize a cloud security program for multi-cloud/hybrid/private environments at scale.
• Embed proactive, risk-based controls into infrastructure to ensure environments are resilient, observable, and secure by default.
• Partner cross-functionally to elevate cloud security posture, automate away risk, and implement security recommendations.

Responsibilities (Implied)

• Design and run security controls that enable fast engineering while maintaining strong security.
• Deploy and customize security tooling to reduce risk and address threats.
• Analyze network and service behavior to find anomalies and improve mitigations.

Requirements

• 5+ years deploying and securing services on public cloud infrastructure.
• Experience with a significant subset of:
  • AWS security tooling: GuardDuty, AWS Config, CloudTrail
  • Terraform
  • Kubernetes and containers
  • Open Policy Agent (OPA)
  • Secrets management
  • SIEM
• Strong understanding of security weaknesses, exploits, attacks, and mitigations.
• Knowledge of networking and web protocols: TCP/IP, HTTP, TLS, REST, and ability to analyze traffic for anomalies.
• Detailed understanding of cloud and network security and Kubernetes components / cloud-native security.
• Fluency in one or more programming or scripting languages.
• Excellent written and verbal communication, plus strong collaboration skills.

Nice-to-Haves

• Depth building/deploying security tools such as CSPM, vulnerability scanners, static analyzers, WAF, IDS/IPS, endpoint security monitoring.
• Depth with at least one major cloud provider (AWS, GCP, or Azure).