Senior Software Engineer II, Cloud Security

Role overview Build the code and infrastructure that secure production cloud systems carrying sensitive financial and identity data. As a senior individual contributor on a small cloud security team, you will shape patterns used across engineering, working closely with infrastructure and reliability teams and partnering with application security where software and infrastructure meet. The work is hands-on, spanning reusable infrastructure, automated policy enforcement, detection, and response.

Responsibilities - Strengthen cloud account structure, identity and access roles, network segmentation, and encryption controls using infrastructure code and Go. - Secure Kubernetes through admission policies, role-based access, network controls, workload identity, runtime safeguards, and maintained container images. - Create reusable, hardened infrastructure modules and continuous-integration policy checks that make secure configurations straightforward to adopt. - Develop and tune detections using cloud audit trails, Kubernetes logs, and runtime signals; build supporting services and data pipelines. - Automate posture checks and access reviews, prioritize findings, and help teams resolve them. - Protect deployment pipelines and credentials, and contribute to cloud incident response and security reviews.

Requirements - Strong experience securing AWS in production, including IAM, account organization, network design, encryption, and logging. - Practical Kubernetes security experience across access control, network policy, admission, workload identity, runtime, and container images. - Proficiency with Terraform or comparable infrastructure-as-code tools and the ability to write production-quality Go services or automation. - Experience building security guardrails and detections that integrate into engineering workflows. - Clear written communication and the ability to collaborate across security, platform, and reliability teams.

Nice to have - Background in regulated or high-liability environments, cloud incident response or detection engineering, or using language models and agents for security analysis.

Benefits and work setup - Remote-first organization. The environment is centered on AWS and Kubernetes, with infrastructure defined in Terraform and security tooling written in Go.