Security Engineer

Role overview

Engineer practical security controls that protect cloud services, applications, and data in a cloud-native environment. Working with security, infrastructure, engineering, IT, and compliance colleagues, you will turn requirements into repeatable safeguards, strengthen threat detection and response, and reduce risk while supporting secure software delivery.

Responsibilities

- Build and maintain AWS security controls for identity, logging, monitoring, network protection, encryption, and configuration assurance. - Improve infrastructure-as-code patterns so cloud safeguards can be deployed and maintained consistently. - Operate and tune SIEM capabilities, including log onboarding, detections, alerting, dashboards, and investigation support. - Strengthen identity controls across cloud, identity-provider, and SaaS environments, including SSO, MFA, access reviews, and privileged access. - Manage vulnerability work from asset coverage and scanning through validation, prioritization, remediation tracking, and reporting. - Help secure CI/CD pipelines, dependencies, secrets, containers, and orchestrated workloads; support incident investigations and document technical guidance.

Requirements

- At least 3 years of relevant hands-on experience in security engineering, cloud or systems engineering, DevSecOps, or a related technical role. - Experience securing AWS environments, including multi-account or multi-environment operations. - Professional experience managing cloud infrastructure or security controls with Infrastructure as Code. - Experience with SIEM or cloud security analytics, including log analysis, detection or alert tuning, and investigation workflows. - Familiarity with identity security controls such as SSO, MFA, lifecycle management, access governance, or privileged access. - Working knowledge of vulnerability management and detection or prevention technologies, with solid network security fundamentals.

Nice to have

- Experience with container security, Docker, image scanning, Kubernetes or ECS, and security automation using scripts or APIs. - Familiarity with security incident response, technical architecture reviews, and communicating risk to technical and business audiences.

Benefits and work setup

- Remote work from within the continental United States, with business hours aligned to Central Time. - The listing describes health coverage, a company-matched 401(k), paid time off, eligible parental leave, and an annual professional development allowance.