Top Cloud Security Engineer Jobs

Leads cloud security strategy and architecture for a SaaS platform handling sensitive health information. Responsibilities include implementing SIEM log sources, driving security initiatives, researching threats and technologies, defining security standards, advising cross-functional teams, conducting forensics and incident response, and monitoring permissions and configurations for least-privilege compliance. The role also mentors security and compliance staff and requires on-site work in Austin, Texas, or Madison, Wisconsin, with limited travel.

Design, build, and operate secure, reliable cloud software platforms and distributed systems. Develop backend APIs, data ingestion pipelines, workflows, automation, and agentic pipelines. Lead architecture, implementation, testing, deployment, observability, and production support while writing high-quality Python code. Provide technical leadership, mentor engineers, document systems, and evaluate cloud-native, AI, and workflow technologies.

Designs and manages security controls for AWS and Kubernetes environments, including sandboxing, infrastructure-as-code, cluster hardening, threat modeling, audits, CI/CD security, incident response, and compliance. The role collaborates with engineering and infrastructure teams, mentors engineers, and advocates for cloud security practices across the organization.

The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance.

Build and operate cloud security solutions protecting Robinhood’s AWS infrastructure. Develop security software, services, automation, safe defaults, and foundational capabilities for engineering teams. Secure enterprise applications and enforce least-privilege access using AWS security services, Terraform, and programming languages such as Golang or Python. The role requires expertise in AWS security architecture, network controls, IAM, and cloud security best practices.

Designs and operates enterprise identity and cloud security solutions using Okta and AWS. Leads application onboarding, authentication controls, automation, CI/CD, monitoring, incident response, resiliency, audit readiness, vulnerability remediation, and production support. Partners across cloud, infrastructure, application, and cybersecurity teams; influences architecture and platform roadmaps; mentors engineers; and drives improvements in security, reliability, onboarding velocity, governance, and operational effectiveness.

Designs, deploys, and operates cloud and on-premises cybersecurity controls for Microsoft datacenter infrastructure. Responsibilities include threat detection and investigation, incident response, security policy improvements, automation, security hardware and software maintenance, metrics analysis, and on-call support. The role leads cloud and identity security roadmaps, Zero Trust adoption, infrastructure-as-code initiatives, and durable improvements following security incidents.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Designs, implements, and operates security controls across Oracle Cloud Infrastructure, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include IAM and federation, key management, workload hardening, Cloud Guard monitoring, logging and SIEM integration, data security, vulnerability management, compliance, threat modeling, incident response, and security automation using Python and Terraform. The role also maintains technical documentation and mentors application and infrastructure teams.

Designs, implements, and operates security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include cloud security architecture, workload hardening, identity and access management, vulnerability and compliance programs, threat detection, incident response, SIEM integration, and security automation. The role also involves troubleshooting, documentation, design and code reviews, cross-functional collaboration, and mentoring junior engineers.

Designs, builds, and operates secure-by-default cloud controls across Google Cloud and multi-cloud environments. The engineer defines IAM and least-privilege policies, develops infrastructure-as-code and CI/CD security practices, supports incident response, establishes cybersecurity standards, tracks security posture KPIs, and partners with platform, product, and security teams to reduce risk while enabling efficient delivery.

Designs and operates cloud security architectures, controls, guardrails, and automation across AWS and Azure. Secures AI/ML platforms, data environments, CI/CD pipelines, and infrastructure-as-code deployments. Leads threat modeling, security assessments, compliance validation, incident response support, and secure technology adoption. Partners with engineering, infrastructure, AI, data, and enterprise architecture teams while developing security standards and applying frameworks such as NIST, CIS, and Zero Trust.

Designs and leads enterprise cloud security architecture across AWS, Azure, GCP, and on-premises environments. Responsibilities include Zero Trust, IAM, encryption, compliance automation, policy as code, CNAPP/CSPM, threat modeling, Kubernetes security, AI/ML security governance, identity fraud mitigation, threat detection, SOAR automation, and hybrid-cloud resilience. The role also supports Purple Team exercises, continuous compliance, Shadow AI management, and autonomous security operations.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs, implements, and operates security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include cloud security architecture, workload hardening, IAM and identity federation, vulnerability and compliance management, incident response, SIEM integration, and security automation. The role also involves troubleshooting, documentation, design and code reviews, cross-functional collaboration, and mentoring junior engineers.

Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.

Design, develop, deploy, monitor, and maintain AI-enabled enterprise and cloud security solutions. Build machine learning workflows, data pipelines, and scalable security capabilities using Python, Java, TensorFlow, and related libraries. Analyze security risks and data quality, translate technical findings into client recommendations, support security controls across cloud and infrastructure environments, review deliverables, and mentor junior team members.

Leads the design and development of AI-driven enterprise and cloud security solutions. Manages teams delivering data, analytics, and machine learning engineering projects; oversees AI model implementation, data infrastructure, pipelines, and platform deployments. Uses Python and C++ for algorithm development, analyzes data, improves data quality, ensures technical compliance, mentors staff, manages client expectations, and drives innovation across cybersecurity and privacy initiatives.

Designs and implements cloud and infrastructure security architecture, reviews systems for vulnerabilities, and drives security improvements across the development lifecycle. The role builds automated security testing, integrates security controls into CI pipelines, enforces secure Infrastructure as Code practices, promotes DevSecOps, advises engineering teams, and coordinates cloud penetration testing. It requires strong AWS, Kubernetes, Terraform, programming, cloud security, and policy management expertise.

Designs, implements, hardens, and manages secure AWS and Azure cloud environments for a Department of Defense customer. Responsibilities include applying RMF and STIG controls, supporting ATO activities, integrating vulnerability and security tools into CI/CD pipelines, securing Kubernetes, containers, networking, storage, IAM, and infrastructure as code, and maintaining logging, monitoring, observability, and alerting capabilities. The role also supports cloud migration, risk analysis, compliance documentation, and continuous security improvement.

Designs and maintains AWS cloud security controls, architectures, monitoring, threat detection, logging, vulnerability management, and incident response. Automates security and compliance checks with Terraform and CloudFormation, integrates security into CI/CD pipelines, and ensures alignment with CIS, NIST, HIPAA, FedRAMP, and SOC 2 frameworks. Collaborates with engineering teams on secure deployments, troubleshooting, secrets management, handoffs, cutovers, and rollback planning.

Own Alloy’s AWS cloud security program, partnering with Infrastructure and engineering teams to secure new designs, reduce infrastructure risk, manage CSPM findings, and implement Terraform-based remediations. Build SIEM and CSPM detections, alerts, dashboards, and runbooks; improve AWS permissions and network security; participate in on-call incident response; and drive root-cause remediation and preventative controls.

Designs, implements, and evaluates cloud security architectures for mission-critical systems. Responsibilities include securing AWS environments, applying RMF and STIGs, hardening Linux and AMIs, managing IAM and security controls, implementing logging and threat detection, remediating vulnerabilities, maintaining security documentation, and mentoring cloud security professionals.

Leads product marketing strategy for CrowdStrike’s cloud risk and developer security portfolio. Owns positioning, launches, messaging, analyst engagement, field readiness, technical content, competitive strategy, thought leadership, and adoption. Partners with Product and CTO leaders to shape roadmap and market direction, creates technical proof for cloud and application security audiences, and uses customer, pipeline, usage, and competitive insights to improve business outcomes.