What are the responsibilities and job description for the Cloud Security Engineer position at Jobgether?
This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Cloud Security Engineer in the United States.
In this role, you will be responsible for designing, implementing, and maintaining secure cloud environments, with a strong focus on DevSecOps practices. You will collaborate with engineering, product, and IT teams to integrate security by design across cloud-native infrastructure. This position offers an opportunity to drive automation, enforce compliance, and strengthen application security throughout the software development lifecycle. The ideal candidate is hands-on, innovative, and thrives in a fast-paced, collaborative environment where security is embedded into every stage of development.
\n- Accountabilities
- Design, implement, and maintain secure CI/CD pipelines with automated SCA, SAST, and DAST scanning tools.
- Integrate security controls and validation checks into DevOps workflows using modern technologies.
- Deploy and manage application and infrastructure security tools to support continuous monitoring and vulnerability management.
- Partner with development and infrastructure teams to remediate risks, ensuring alignment with industry security best practices and compliance standards.
- Perform manual and automated web application/API security assessments, validating vulnerabilities and verifying remediation efforts.
- Monitor cloud infrastructure security (AWS) and manage security alerts using tools such as Datadog, CloudWatch, and CloudTrail.
- Collaborate with compliance and privacy teams to ensure adherence to data protection regulations (GDPR, CCPA).
- Lead initiatives to evolve software security automation, threat modeling, and DevSecOps practices.
- Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- Minimum of 5 years of hands-on experience in DevSecOps, Cloud Security, or related roles.
- Proven experience securing CI/CD pipelines and implementing automated SCA, SAST, and DAST tools.
- Strong knowledge of AWS security services, including IAM, KMS, CloudTrail, GuardDuty, and WAF.
- Experience with Infrastructure-as-Code security tools (Terraform, Pulumi, CloudFormation).
- Familiarity with scripting, automation, Lambda functions, containerization (Docker, Kubernetes), and API security.
- Background in offensive security testing, penetration testing, and threat modeling.
- Understanding of compliance frameworks (SOC 2, ISO 42001, NIST, or similar) and data privacy principles.
- Strong analytical, problem-solving, and communication skills.
- Preferred Qualifications
- Experience with SaaS application security and enterprise integrations.
- Knowledge of Entra ID (Azure AD) and Microsoft 365 security features.
- Relevant certifications such as AWS Certified Security – Specialty, CISSP, CCSP, or GIAC Cloud Security Engineer.
- Exposure to GenAI and AI coding tools.
- Benefits
- Competitive salary range ($56,100 – $188,900 annually).
- Comprehensive health, dental, and vision coverage.
- 401(k) with company match.
- Flexible remote work arrangement within the U.S.
- Professional development and training opportunities.
- Collaborative, innovative, and high-velocity work environment.
Why Apply Through Jobgether?
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1