Senior Cloud Security Engineer
New
T
Tessera LabsCloud security
Remote in the U.S.Full-TimeSenior
Salary200,000 - 250,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSPythonGCPMicrosoft AzureCI/CDDevOpsTerraform
Requirements
- Experience in a DevOps, SRE, or platform engineering role.
- Experience building and operating production infrastructure and CI/CD pipelines.
- Hands-on production experience securing at least two of AWS, GCP, and Azure.
- Understanding of differences in cloud-provider identity, networking, and logging models.
- Knowledge of cloud security best practices, including CIS Benchmarks and provider security foundations guidance.
- Fluency in least-privilege IAM, workload identity, network segmentation, private connectivity, encryption, key management, secrets management, centralized logging, and preventive guardrails.
- Strong coding and scripting skills in at least one general-purpose language, such as Python or Go, plus shell scripting.
- Hands-on IaC experience, such as Terraform or OpenTofu, including embedding security checks.
- Open-source cloud security tooling familiarity, such as Prowler, Checkov, Trivy, OPA, or Falco.
- Container and Kubernetes security experience, including admission control and runtime policy.
- Relevant cloud security certification, such as AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, or CCSP.
- Experience supporting SOC 2, ISO 27001, or similar compliance programs; cloud incident response or forensics experience.
Responsibilities
- Own the security posture of cloud environments across AWS, GCP, and Azure.
- Design secure reference architectures and reusable patterns for account and project structure, network segmentation, encryption, key management, and secrets management.
- Build security into IaC with hardened modules, policy as code, and pre-deploy checks.
- Secure CI/CD pipelines and the software supply chain, including permissions, secrets, artifact integrity, and workload identity.
- Design and enforce least-privilege IAM, identity federation, and periodic access reviews across clouds.
- Write code and scripts to automate security controls, remediation, and evidence collection.
- Operate and tune CSPM and cloud-native security services, and drive findings through remediation.
- Build cloud logging and detection, and lead the cloud side of incident response.
- Contribute security controls and evidence to compliance programs such as SOC 2 and ISO 27001.
View Full Description & ApplyYou'll be redirected to the employer's site
