RemoteLeaf Logo
Log in Sign up

Staff Cloud Security Engineer

6 months, 1 week ago
United States
Full-time
Lead
Cloud Engineer
DevOps and Infrastructure
AWS CI/CD Docker GCP Go HIPAA Kubernetes Python Ruby SIEM Terraform
Apply Now
Included Health

Included Health

Included Health is a healthcare company that provides cost-saving solutions for employers and health plans. They offer virtual care and navigation services, connecting millions with board-certified doctors and specialists for comprehensive and convenie...

Insurance
1K-5K
$106M raised
View All Jobs 21

Description

  • Design, develop, and implement cloud authorization frameworks for roles, resource restrictions, task-based access, and granular engineering permissions.
  • Lead the implementation of Just-In-Time (JIT) access controls for production systems, secrets, and data.
  • Collaborate with engineering teams to connect data classification signals to access control decisions.
  • Build and maintain security automation tools, scripts, and services in Python or Go for operations, vulnerability management, compliance, and incident response.
  • Develop clean, testable security code and custom integrations, with Terraform-based infrastructure automation and auditing.
  • Contribute to centralized security controls such as an engineering-owned WAF for rate limiting, IP blocking, input validation, and request filtering.
  • Partner with teams to secure the development toolchain and reduce supply chain risk across generators, linters, browser extensions, CLI tools, and IDE plugins.
  • Define and enforce container security hardening standards for least privilege, reduced tooling, and limited internet access.
  • Remediate legacy cloud environments, especially in GCP, by inventorying and improving security controls.
  • Conduct security assessments, threat modeling, incident response support, and maintain documentation for architectures, automation, and playbooks.

Requirements

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  • 5+ years of cloud security experience, with strong emphasis on AWS.
  • Hands-on software development experience in Python and Go for security automation, tooling, or infrastructure management.
  • Proven experience designing authorization and access control frameworks, including RBAC, ABAC, policy-as-code, and JIT access.
  • Deep experience with Infrastructure as Code, especially Terraform modules for security.
  • Experience with containerization technologies such as Docker and Kubernetes/EKS, including container hardening.
  • Experience integrating security into SDLC and CI/CD pipelines, and applying secure software development practices.
  • Experience with security logging, monitoring, and alerting tools such as SIEM, AWS CloudTrail, CloudWatch, and GuardDuty.
  • Experience with cloud security frameworks, especially HIPAA, and relevant regulations and standards.
  • Familiarity with Ruby is a plus.

Benefits

  • Base salary range of $174,320-$320,099 depending on geographic zone, plus equity and benefits.
  • Remote-first culture.
  • 401(k) savings plan through Fidelity.
  • Comprehensive medical, vision, and dental coverage, including disability insurance options.
  • Paid Time Off (PTO) and Discretionary Time Off (DTO).
  • 12 weeks of 100% paid parental leave.
  • Family building and compassionate leave, including fertility coverage and up to $25,000 for surrogacy/adoption support.
  • Work-from-home reimbursement to support home office collaboration.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

True Zero Technologies

Google Cloud Platform (GCP) Architect (R-00239)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking a Google Cloud Platform Architect to design, deploy, and support secure cloud solutions primarily in GCP, with a focus on Gemini Enterprise, Vertex AI, Infrastructure as Code, and cross-cloud operations.

United States Full-time Mid Level Cloud Engineer
AWS Generative AI Linux Network Security Terraform Vertex AI
4 hours, 34 minutes ago
Nooks

Cybersecurity Engineer

Nooks 1-10 Professional Services

Nooks is seeking a hands-on Cybersecurity Engineer to own and strengthen the company’s unclassified environment, maintaining NIST SP 800-171 and CMMC Level 2 compliance and audit readiness across its facilities.

United States Full-time Senior Security Engineer
$145k-$163k
Cybersecurity
4 hours, 34 minutes ago
Egen.ai

Lead Cloud Engineer (Azure)

Egen.ai IT Services

Egen is seeking an Azure infrastructure engineer to build and operate a secure, compliant enterprise data platform spanning Azure and Google Cloud environments.

United States Full-time Lead Cloud Engineer
$150k-$205k
Apache Airflow Azure CI/CD Encryption GCP HIPAA Kubernetes Neo4j PostgreSQL Salesforce Terraform
4 hours, 49 minutes ago
Dijital Team

Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

Dijital Team 11-50 Internet Software & Services

A Senior Microsoft Engineer (Level 3) will serve as a technical authority for a managed IT services provider, resolving complex issues and improving the security, reliability, and efficiency of multi-tenant Microsoft cloud environments for commercial customers.

Sri Lanka Full-time Senior Cloud Engineer Security Engineer
Azure Cybersecurity PowerShell
4 hours, 49 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers