RemoteLeaf Logo
Log in Sign up

Cloud Security Engineer

3 months, 2 weeks ago
United States
Full-time
Senior
Infrastructure Engineer
DevOps and Infrastructure
AWS Azure CI/CD HashiCorp Vault Kubernetes Secrets Management Terraform
Apply Now
WorkWave

WorkWave

WorkWave provides field service management software solutions to automate business operations, improve efficiency, and enhance customer experiences through a suite of products like PestPac® and WorkWave Service™.

Professional Services
251-1K
Founded 1984
View All Jobs 11

Description

  • Lead deployment and optimization of AWS Control Tower, Security Hub, and AWS WAF to establish a secure multi-account strategy.
  • Own cloud security outcomes across AWS (primary), Azure (secondary), and limited GCP, including secure landing zone standards, guardrails-as-code, detection coverage, and remediation automation.
  • Design and implement reusable, secure-by-default cloud patterns, hardened Terraform modules, reference architectures, and baseline configurations to enable safe engineering self-service.
  • Collaborate with AppSec and platform teams to secure container environments (EKS/ECS) through image scanning, runtime protection, and least-privilege orchestration.
  • Perform comprehensive baseline cloud security assessments, produce prioritized roadmaps, and drive remediation with engineering partners.
  • Lead design and enforcement of least-privilege IAM architecture across accounts and workloads, including KMS key strategy and governance.
  • Develop and maintain secure configuration standards, operational procedures, and documentation to enable consistent, audit-ready cloud operations.
  • Own detection and telemetry (CloudTrail, GuardDuty, VPC Flow Logs, etc.), CSPM/MDR integrations, and tuning to improve alert fidelity and remediation workflows.
  • Build and run cloud vulnerability and exposure management programs (workloads, container images, AMIs) with severity-based SLAs and scalable scanning/patch workflows.
  • Participate in on-call rotation as primary cloud security SME, run incident playbooks and tabletop exercises, and ensure forensics readiness and break-glass procedures.

Requirements

  • 5–8+ years in Information Security with at least 3+ years focused on AWS cloud security.
  • Deep hands-on experience designing and securing AWS environments and core services (IAM, VPC, S3, KMS) and security services (GuardDuty, Inspector, Config).
  • Strong hands-on experience with Terraform and infrastructure-as-code practices.
  • Proven experience securing containerized workloads in EKS or ECS and integrating image/runtime scanning and protections.
  • Willingness to support and maintain an existing Azure environment (deep Azure expertise not required).
  • Experience with cloud detection/telemetry, CSPM/MDR tooling, and vulnerability scanning (e.g., AWS Inspector, ECR scanning).
  • Ability to assess complex environments and produce a pragmatic, prioritized “roadmap to green” and to collaborate closely with engineering teams.
  • Automation-first mindset with experience automating security controls, remediation, and evidence collection for compliance.
  • Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience); AWS/Azure security certifications (e.g., AWS Certified Security – Specialty, Azure security cert) are highly desirable.
  • Willingness to participate in on-call rotations and incident response as the cloud security SME.

Benefits

  • Salary range $120,000 - $145,000 per year (final offer dependent on experience and qualifications).
  • Remote-first work environment with flexible remote work and optional use of regional offices and HQ in Holmdel, NJ.
  • Robust benefits package including health and dental insurance and 401(k) with company match.
  • Flexible Time Off or generous PTO plan and paid holidays.
  • Up to 4 weeks paid bonding leave.
  • Tuition reimbursement and access to extensive on-demand and live training resources for career growth.
  • Employee Assistance Program (TotalCare) with 24/7 counseling, plus 24/7 virtual medical care via Teladoc.
  • Quarterly peer-nominated awards, regional discounts, and opportunities to participate in charitable and community events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Huge

Freelance Technology Lead

Huge 251-1K Media

Huge is hiring a remote freelance Technology Lead in Canada to support a short-term WordPress security remediation initiative for an enterprise platform.

United States Canada Contract Senior Security Engineer Technical Lead
$0k-$0k
PHP WordPress
37 minutes ago
Bandwidth

Sr. IP Network Engineer

Bandwidth 1K-5K Diversified Telecommunication Services

Bandwidth is seeking a Senior IP Network Engineer to help design, operate, and evolve its highly resilient global network supporting voice, messaging, and emergency services at scale.

United States Full-time Senior Network Engineer Security Engineer
Ansible Cisco Juniper Linux Palo Alto Python
37 minutes ago
Fireworks AI

Member of Technical Staff, Cloud Infrastructure, Singapore

Fireworks AI 1-10 Internet Software & Services

Fireworks AI is hiring a Backend Software Engineer to design and develop the backend systems that power its generative AI infrastructure platform.

Singapore Full-time Mid Level Backend Engineer Infrastructure Engineer
$133k-$185k
Machine Learning PyTorch
37 minutes ago
Yubico

Sr. Infrastructure Engineer

Yubico 251-1K Professional Services

Yubico is hiring a Platform/Infrastructure Engineer to design and operate secure cloud and Kubernetes infrastructure that supports its engineering teams across Sweden and the US.

Sweden Senior Infrastructure Engineer
Bash GCP GitHub Actions GitOps Go Grafana Kubernetes Linux Prometheus Python Terraform
52 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers