Senior Software Engineer II, Cloud Security
New
Q
QualiaReal estate technology
While this role is based in Austin, Texas, we're open to exploring remote possibilities for qualified candidates.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years in cloud security, infrastructure, SRE, or platform engineering, with at least 3 focused on securing production cloud environments
- Required Skills
- AWSGoTerraform
Requirements
- Bring 6+ years in cloud security, infrastructure, SRE, or platform engineering, including at least 3 years securing production cloud environments.
- Have deep hands-on AWS experience, including IAM policy evaluation, Organizations, VPC and private connectivity, KMS, CloudTrail, and GuardDuty or equivalent.
- Have production Kubernetes security experience with RBAC, admission control, network policy, pod security, and workload authentication to cloud APIs.
- Be strong in Terraform or similar infrastructure as code, including writing and reviewing modules and building guardrails used by other teams.
- Write production code; Go is preferred, with Python or TypeScript experience welcome if ready to work in Go.
- Be able to explain how an attacker could move from a leaked credential or compromised pod to sensitive data and how to detect each step.
- Write clear, direct findings and design documents that hold up in review.
- Optional: experience in fintech, real estate technology, or another regulated, high-liability domain.
- Optional: cloud penetration testing, red team, or DFIR experience.
- Optional: supply chain security experience, including artifact signing, SBOMs, or SLSA-style provenance in CI/CD.
- Optional: open source security tooling, published research, or conference talks.
Responsibilities
- Design and implement AWS account structure, IAM roles and permission boundaries, network segmentation, and KMS usage in Terraform and Go.
- Implement Kubernetes admission policies, RBAC, network policies, workload identity, and runtime controls, and keep container images minimal and patched.
- Build reusable hardened IaC modules and CI policy checks.
- Build and tune cloud detections using CloudTrail, Kubernetes audit logs, and runtime signals; develop the supporting Go services and pipelines and feed InfoSec's SIEM.
- Implement just-in-time access, short-lived credentials, and secrets management for people, services, and CI.
- Build and run cloud posture checks in Go across AWS accounts and container images; fix root causes in code and automate repeat fixes.
- Investigate cloud alerts, handle the infrastructure side of incidents, and address gaps to prevent recurrence.
- Review infrastructure pull requests and design proposals, and work with SRE and product engineers to land fixes.
View Full Description & ApplyYou'll be redirected to the employer's site
