Remote Cloud Security Engineer Jobs (NOW HIRING)

We are seeking an experienced Security Engineer to design, implement, and continuously improve our information security program across cloud infrastructure, identity and access management, vulnerability management, and security automation. We’re looking for someone who is hands-on, technically strong, and comfortable working across engineering and IT teams in a fast-paced environment.

Key Responsibilities

• Design and enforce security controls across cloud infrastructure (AWS and Azure), including encryption standards, key management, and data protection aligned to SOC 2 and GLBA requirements
• Implement and maintain cloud security posture management (CSPM) tooling to identify misconfigurations and drift
• Support secure architecture reviews for new cloud workloads and thirdparty integrations
• Configure and manage cloud network security controls, including firewalls, security groups, VPC/VNet segmentation, and private endpoints, across AWS and Azure environments
Vulnerability Management
• Own the endtoend vulnerability management lifecycle, including discovery, prioritization, triage, remediation coordination with engineering and IT teams, and metrics reporting for leadership and audit purposes
• Operate and tune vulnerability scanning tools across cloud infrastructure, endpoints (including EDR and MDMmanaged devices), and application dependencies
• Evaluate thirdparty and opensource library risks, including dependency scanning in CI/CD pipelines, GitHub repositories, and AI/ML model dependencies
• Coordinate thirdparty penetration testing and offensive security assessments, track findings to remediation, and validate control effectiveness postremediation
• Leverage AIassisted tools to enhance vulnerability discovery, prioritization, and remediation workflows

Identity & Access Management (IAM)

• Administer and mature IAM controls across Okta, Entra ID, and AWS IAM, including rolebased access, least privilege enforcement, and privileged access governance
• Manage device assurance policies, conditional access rules, and MFA enforcement across the workforce identity stack, maintaining documentation and audit evidence for SOC 2 CC6.x trust services criteria
• Conduct regular access reviews and support user lifecycle automation including provisioning, deprovisioning, and access certification
• Govern AI agent identities and service account access, applying least privilege principles to automated and agentic workloads
Security Monitoring
• Operate and continuously tune SIEM to detect threats, anomalous behavior, and policy violations across cloud, endpoint, and identity layers, including cloudnative signals such as GuardDuty findings and anomalous API activity
• Develop and maintain detection rules, correlation queries, and dashboards to support proactive threat identification and incident response
• Maintain log source coverage inventory and ensure critical systems (AWS, M365, Okta, network security controls) are onboarded and generating actionable telemetry
• Monitor and triage endpoint security alerts from EDR and MDM platforms (e.g., Microsoft Defender for Endpoint, Intune), investigate anomalies, and coordinate response with IT
Security Automation & Tooling
• Build and maintain automated workflows for security operations, including alert triage, user deprovisioning, evidence collection, and compliance reporting
• Develop and manage integrations across the security stack using APIs, scripting (Python, PowerShell, Bash), infrastructureascode tools (Terraform), and lowcode platforms such as QuickBase
• Define and maintain security infrastructure as code (IaC) using Terraform, enabling repeatable, auditable deployment of security controls across cloud environments
• Evaluate and secure AI tools and agentic solutions, including controls around data exposure, model access, and AI agent privilege management
Security & Compliance Knowledge
• Working knowledge of SOC 2 Trust Services Criteria
• Familiarity with GLBA Safeguards Rule requirements and related data protection obligations
• Understanding of NIST CSF 2.0 and common vulnerability and risk frameworks
• Experience supporting or participating in external security audits or assessments

Required Qualifications

Technical Skills
• 35 years of experience in an information security or security engineering role
• Handson experience with cloud security (AWS and Azure), vulnerability management programs, and SIEM platforms for log analysis and threat detection
• Proficiency with identity platforms (Auth0, Okta, Entra ID / Azure AD) and endpoint security tooling including EDR/MDM platforms such as Microsoft Defender and Intune
• Experience with infrastructureascode tools, including Terraform, for deploying and managing security controls across cloud environments
• Scripting and automation skills in Python, PowerShell, or Bash
Soft Skills
• Strong analytical and problemsolving skills with the ability to assess risk and prioritize work
• Clear written and verbal communication skills
• Collaborative working style with experience partnering across the organization
• Comfortable operating in a fastpaced, regulated environment with competing priorities
Education & Certifications
• Bachelor’s degree in Computer Science, Information Security, or a related field or equivalent professional experience
• Relevant security certifications are a plus
• SOC 2 or compliancerelated training a plus
What We Offer
• Competitive salary and comprehensive benefits package
• Professional development opportunities and certification reimbursement
• Remotefirst work environment with flexible arrangements
• Opportunity to build and own a security function with real organizational impact
• Collaborative team culture with exposure to a modern, cloudforward technology stack
Work Environment

This is a fully remote role requiring collaboration with cross-functional teams including IT, engineering, compliance, and legal. The position involves both hands-on security operations and program-level work, with significant opportunity to drive process improvement and tooling maturity. The security engineer will operate as a core contributor to the organization’s SOC 2 compliance program and ongoing security posture improvement efforts.

Requirements
• Authorized to work in the United States and based in a companyapproved location.
• The successful completion of a background check, conducted in accordance with local law/regulations, before beginning work.
• Employment verification through EVerify.
Benefits:
• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Work Location: Remote