Senior Cloud Security Engineer

Role Overview

Senior Cloud Security Engineer (100% Remote, Contract-to-Hire). You will help design forward-looking cloud security patterns in AWS, making secure implementation the default for engineering teams.

Responsibilities

• Design & deliver cloud-native security solutions across AWS and SaaS to enhance visibility, strengthen protection controls, and enable automated detection & remediation.
• Build code and Infrastructure as Code (IaC) to operationalize security controls using modern automation tooling.
• Design, deploy, and manage highly available, secure, scalable cloud security services in production.
• Integrate security into CI/CD pipelines and engineering workflows.
• Translate security priorities into production systems by partnering with Information Security and engineering teams.
• Research/prototype/validate new approaches and carry them through architecture, documentation, and production implementation.
• Provide risk assessments and data-driven recommendations.
• Identify systemic weaknesses and implement durable automated fixes to reduce recurring risk.
• Evolve security engineering patterns (reference architectures, reusable patterns, automation frameworks).
• Operate and improve security tooling (tuning, upgrades, integrations) and enhance resilience/observability/operational maturity.
• Evaluate and promote new security standards, tools, and automation to increase scale and effectiveness.

Requirements

• 3–5 years hands-on experience in cyber defense: threat hunting, detection engineering, or incident response in a cloud or enterprise environment.
• AWS experience investigating activity using telemetry such as:
  • CloudTrail, IAM logs, VPC Flow Logs, CloudWatch
• SIEM detection engineering: write and tune SIEM queries/detections; improve signal-to-noise and reduce false positives.
• Threat hunting experience (hypothesis-driven, analyze data, document findings, recommend improvements).
• Incident response support (log analysis, impact scoping, documentation, remediation steps).
• Familiarity with attacker behaviors/frameworks such as MITRE ATT&CK and applying them to practical detection/investigation.
• Scripting/automation with Python, PowerShell, or Bash.

Nice to Have

• Experience with Sumo Logic.