Top Remote Cloud Security Engineer Jobs

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

As a Cloud Security Engineer, you'll secure cloud infrastructure, manage AWS and Kubernetes security solutions, conduct assessments, and mentor engineers.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Secure Temporal’s multi-cloud platform across AWS, GCP, and Azure by embedding security into infrastructure and application architecture. Responsibilities include threat modeling, risk assessment, Kubernetes hardening, multi-tenant isolation, gRPC and mTLS security, service mesh configuration, cloud security posture management with Wiz, secrets management, encryption, compliance policy development, engineering partnership, and on-call participation. The role also contributes to responsible AI practices and security for distributed workflow systems.

Lead design, implementation, automation, and operation of enterprise Okta identity services. Drive application onboarding, federation, lifecycle management, resiliency, monitoring, incident response, governance, and platform automation while mentoring engineers and improving security posture.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Lead the maturation of Ontic’s AWS cloud security program by designing and automating security controls, integrating security into CI/CD workflows, improving cloud monitoring and detection, and developing continuous evidence collection for FedRAMP and other compliance initiatives. Partner with Engineering and DevOps teams on secure architecture, cloud best practices, regulated SaaS environments, and measurable security improvements.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Design, implement, and maintain cloud security controls across Microsoft Azure and Microsoft 365. Configure and operate Defender suite, Sentinel, and logging; assess AKS and container workloads; perform vulnerability management and incident response; collaborate with cloud and compliance teams; support audits and customer security requests; develop documentation, automation, and monitoring to improve security posture.

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Lead design and implementation of security controls for AI and cloud platforms, configure DLP and alerting, detect and remediate misconfigurations, perform AI security assessments, document findings, and advise clients and presales on AI security best practices.

Design, build, and scale HSM-backed cryptographic and key-management services for large-scale cloud environments. Implement PKI, TLS, client-side encryption, TEEs, and Confidential VMs. Integrate identity (OAuth/SAML/Keycloak) and secure Google Workspace services. Ensure cryptographic lifecycle, compliance (FIPS), high availability, and support secure deployments across cloud APIs, OS, and hardware.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Build full-stack features for Google Drive and OAuth surfaces, design and ship LLM-powered agentic workflows for detection, investigation, and remediation, integrate with Google Workspace APIs at scale, partner with product and design, collaborate across teams, and contribute through mentorship, code review, and ownership from design to production.

Design, implement, and operate AWS cloud security and infrastructure: least-privilege IAM, network segmentation, multi-account governance, detection and response, vulnerability management, HIPAA compliance, and embedding security into the development lifecycle. Build automated remediation pipelines, maintain GitHub CI/CD automation, validate SIEM logging, and produce prioritized gap analyses for active care programs.