Remote job
Cloud and Devops Security Engineer
Job details
About this role
Role overview
Integrate security into cloud infrastructure, software delivery workflows, and production operations. This engineer partners with product, platform, DevOps, architecture, and IT teams to assess risks and implement practical fixes, while contributing to security monitoring, incident response, and ongoing improvements to the organization’s security posture.
Responsibilities - Embed security checks, controls, and policy enforcement into CI/CD pipelines and cloud development processes. - Help design and maintain secure cloud infrastructure and application environments. - Assess and strengthen identity, networking, containers, Kubernetes, storage, key management, logging, and monitoring controls. - Build security automation using infrastructure as code, policy as code, and DevSecOps tools. - Conduct threat modeling, architecture reviews, vulnerability assessments, and security testing. - Investigate security findings, implement remediations, validate fixes, and support incident response and monitoring. - Create reusable standards and technical guidance, and communicate risks and recommendations to stakeholders.
Requirements - At least five years of experience in DevOps, cloud engineering, security engineering, or a related field. - Bachelor’s degree in computer science, information security, engineering, or equivalent practical experience. - Experience securing Microsoft Azure environments and integrating controls into engineering workflows. - Strong knowledge of cloud security architecture and experience with CI/CD, source control, and DevSecOps practices. - Proficiency with infrastructure as code and automation, such as Terraform, Bicep, PowerShell, or Python. - Familiarity with application, cloud, container, API, and infrastructure security testing; Kubernetes and vulnerability management; and frameworks such as OWASP, NIST SSDF, or CIS Benchmarks. - Experience supporting security investigations, incident response, and remediation.
Nice to have - Relevant cloud, security, or DevOps certifications.
Benefits and work setup - Remote role. Applicants must be authorized to work in the United States; visa sponsorship is not available.