Cloud Security Engineer II
New
T
TripadvisorTravel Technology
Needham - MA or Remote - United StatesFull-TimeMiddle
Salary$135,000 -$155,000
Apply NowOpens the employer's application page
Job Details
- Experience
- 3–5 years
- Required Skills
- AWSPythonBashKubernetesGoCI/CDTerraform
Requirements
- 3–5 years of dedicated hands-on experience in cloud security, DevSecOps, or infrastructure security engineering.
- Deep working knowledge of core AWS security services including IAM, GuardDuty, Security Hub, KMS, CloudTrail, and Organizations.
- Strong proficiency in Infrastructure as Code with a preference for Terraform.
- Scripting proficiency in Python, Go, or Bash.
- Practical experience securing Kubernetes/EKS environments.
- Configuring CI/CD security scanners such as GitHub Actions or GitLab CI.
- Solid understanding of cloud networking including VPCs, Transit Gateways, WAF, and DNS.
- Knowledge of identity management protocols including OAuth2, OIDC, and SAML.
- Familiarity with industry frameworks like CIS Benchmarks, NIST CSF, and SOC 2.
- Optional but preferred: AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or CCSP.
Responsibilities
- Design, deploy, and enforce scalable cloud security controls, IAM least-privilege policies, and encryption standards across multi-account AWS environments.
- Embed automated security tools like IaC scanning, SAST, and secret detection directly into CI/CD pipelines.
- Develop automated detection and remediation workflows using Python, Bash, or Go alongside IaC tools such as Terraform or CloudFormation.
- Implement and maintain security practices for containerized workloads including Docker and Kubernetes/EKS.
- Manage CSPM/CNAPP platforms, investigate high-priority alerts, and reduce noise through automated risk scoring.
- Conduct architectural security reviews and threat modeling for new cloud features, infrastructure changes, and third-party integrations.
- Act as a secondary point of contact for cloud security incidents, assisting with forensic collection and root-cause analysis.
View Full Description & ApplyYou'll be redirected to the employer's site
