Cloud Security Engineer
$60k - $300k • Sunnyvale • FullTime
Posted 6mo ago
About the job
Applied Intuition is seeking a highly focused Cloud Security Engineer to play a crucial role in securing our infrastructure across diverse multi-cloud environments (AWS, Azure, GCP, OCI), with a heavy emphasis on Kubernetes cluster hardening. You will establish robust guardrails, enforce Identity and Access Management policies, and maintain our Cloud Security Posture Management (CSPM) to prevent insecure deployments and ensure continuous compliance. This role involves working alongside our Corporate Security & Infrastructure team to secure our cloud footprint.
Responsibilities
- Securely deploy and maintain infrastructure across diverse multi-cloud environments, establishing cloud-specific robust guardrails.
- Implement and enforce security best practices for Cloud native Kubernetes clusters, including RBAC, network policies, and admission controllers.
- Develop, implement, and enforce robust security policies for user authentication and authorization, managing identities and enforcing least privilege.
- Ensure the security of container images, registries, and runtime environments using tools like Docker and container scanning solutions.
- Manage infrastructure and security policies through version-controlled Git repositories using IaC tools like Terraform or CloudFormation.
- Maintain CSPM tools such as Wiz to continuously detect and remediate misconfigurations and compliance drifts.
- Automate compliance checks and generate necessary evidence for audits across the multi-cloud environment.
- Monitor and protect running applications and containers from threats during their operational lifecycle.
Requirements
- 5+ years of industry experience in software engineering or security engineering, with a focus on designing and building secure, production-grade cloud systems.
- Extensive experience with Kubernetes from a security perspective, including securing containerized workloads and enforcing RBAC.
- Experience implementing AI to rapidly identify, validate, and remediate security issues.
- Deep operational security experience with AWS.
- Practical experience deploying and securing infrastructure across Azure, GCP, or OCI.
- Proficiency in Infrastructure-as-Code (IaC) tools such as Terraform, CloudFormation, or AWS CDK.
- Hands-on expertise in configuring, monitoring, and driving remediation through Cloud Security Posture Management (CSPM) platforms like Wiz.
- Strong background in designing and enforcing complex Identity & Access Management (IAM) and least-privilege architectures.
- Experience working with container security, image scanning, and runtime protection tools.
Benefits
- Base salary
- Equity in the form of options and/or restricted stock units
- Comprehensive health, dental, vision, life and disability insurance coverage
- 401k retirement benefits with employer match