Senior Security Engineer - Cloud
New
M
Muon SpaceSpace systems
Fully remote from an approved U.S. location. Muon is currently registered and able to hire in the following states: AL, AZ, CA, CO, CT, DC, FL, GA, IL, IA, ID, MD, MA, MI, MN, MO, NJ, NY, NC, OH, OR, PA, TN, TX, VT, VA, WAFull-TimeSenior
SalaryThe salary range for this role is $193,000 - $218,000, plus a competitive equity grant
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of experience in information security or security engineering roles
- Required Skills
- AWSKubernetesMicrosoft AzureTerraformCloudFormation
Requirements
- Bring 5+ years of experience in information security or security engineering roles.
- Have hands-on cloud security experience across AWS and at least one of GCP or Azure, including IAM, VPC/networking, security groups, CloudTrail, GuardDuty, Config, and KMS.
- Have experience with CSPM tooling and securing infrastructure-as-code and CI/CD pipelines.
- Be familiar with container and workload security, including Kubernetes, serverless, and image scanning.
- Have experience with SIEM platforms such as Splunk, Sentinel, or Elastic for log analysis and detection engineering.
- Demonstrate cloud networking knowledge, including firewalls, proxies, DNS security, network segmentation, and packet analysis.
- Be familiar with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001.
- Communicate written and verbal risk and technical findings to engineers and leadership.
- Relevant cloud security or general security certifications are a nice to have.
- Experience with infrastructure-as-code security and CI/CD pipeline security is a nice to have.
- Background in environments subject to ITAR/EAR export control requirements is a nice to have.
Responsibilities
- Drive CSPM across AWS, GCP, and Azure, including IAM policies, bucket security, security group and network reviews, and CloudTrail, GuardDuty, and Config monitoring.
- Architect secure cloud environments, including landing zones, account and organization structure, network segmentation, encryption, and key management.
- Secure cloud workloads and containers, including Kubernetes/EKS, serverless functions, and container image scanning.
- Embed security into infrastructure-as-code and CI/CD pipelines using Terraform and CloudFormation, with automated policy and misconfiguration checks.
- Manage cloud identity and access, including least-privilege roles, federation, and secrets management across cloud platforms.
- Support CMMC Level 2 and NIST SP 800-171 compliance by maintaining SSP control narratives, collecting evidence, and preparing for assessments.
- Contribute to security policy development and keep documentation current as the environment evolves.
View Full Description & ApplyYou'll be redirected to the employer's site
