Cloud Native Workload Protection

Cloud Native Workload Protection Engineer Jobs

2 jobs found

Today

Senior Security Engineer - Container & Cloud Security

Ecco Select New York, NY

New York, NY

Today

$65 - $65/hr Contract Cloud Native Security Cloud Native Workload Protection Cloud Platforms

Apply Now

Job Description

Ecco Select is hiring a Senior Security Engineer to support a policy-as-code security team focused on automating governance and security controls across Azure and GCP. In this contract role (hybrid in New York), you will help harden Kubernetes workloads, improve runtime detection and incident response, and implement container software supply chain protections using Wiz.

The position is centered on securing containers end to end, including Kubernetes platforms (AKS, GKE, and EKS), Wiz Defend/CWPP runtime capabilities, and Infrastructure-as-Code guardrails built with Terraform, Helm, and GitOps. You will also translate security outcomes into Compliance-as-Code aligned to CIS, NIST, and STIG benchmarks and connect findings to enterprise workflows in ServiceNow.

Responsibilities

Design, implement, and maintain cloud-native container security controls across Kubernetes platforms including AKS, GKE, and EKS.
Develop, tune, and maintain container threat detection rules to identify malicious activity, anomalous behavior, and indicators of compromise across cloud environments.
Monitor runtime security events, investigate security alerts, and lead triage and incident response for container and Kubernetes workloads.
Deploy, configure, and optimize Wiz Defend/CWPP capabilities, including runtime sensors, workload protection, and attack path analysis.
Build and automate security guardrails, admission controller policies, and preventative controls using Infrastructure as Code with Terraform, Helm, and GitOps.
Secure the container software supply chain through image scanning, SBOM validation, image signing, and registry security.
Identify, prioritize, and remediate container vulnerabilities and misconfigurations using risk-based exposure analysis.
Develop and maintain Compliance-as-Code policies aligned with CIS, NIST, and STIG security benchmarks.
Integrate security findings and threat intelligence into ServiceNow and enterprise vulnerability management workflows.
Partner with Security Operations, Cloud Engineering, DevSecOps, and application teams to strengthen detection coverage, incident response, and overall cloud security posture.
Conduct threat hunting and proactive analysis to identify emerging threats and improve detection logic and runtime protection capabilities.
Support post-incident reviews through root cause analysis, corrective-action recommendations, and continuous improvement of detection and response.

Requirements

Strong cloud security knowledge spanning AI/ML platforms, model pipelines, data layers, IAM, networking, and logging.
Hands-on Wiz CNAPP expertise (CSPM, CIEM, DSPM, CWPP), including experience applying it to AI workloads, model hosting, and data pipelines.
Experience designing security controls and architecture at the model, data, and platform levels, including preventive and detective controls.
Compliance-as-Code fluency, including mapping Wiz findings to STIGs, native cloud policies, CI/CD, and governance workflows.
Ability to interpret Wiz risk graphs and communicate risk-based exposure analysis for model misuse, data leakage, privilege escalation, and blast radius.
Kubernetes experience across AKS, GKE, and EKS.
Working knowledge of Terraform, Helm, and GitOps-based pipelines.

Technologies

Wiz, Wiz Defend, CWPP, CSPM, CIEM, DSPM
Kubernetes, AKS, GKE, EKS
Terraform, Helm, GitOps, Azure, GCP
CIS, NIST, STIG
ServiceNow
Container image scanning, SBOM, image signing, registry security
Admission controller, Infrastructure as Code, CI/CD

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Retirement plan
Vision insurance

Additional Details

Location: New York, NY (hybrid). Toronto, ON strongly preferred; NY tri-state area (NJ, Philadelphia, NYC) considered as secondary.
Schedule: Full-time, approximately 3 days/week onsite.
Work authorization: GC or USC only.
Interview process: Panel interview with the Hiring Manager and two technical leads.
Duration: 6 months initial, with strong intent to convert to full-time (engagements on this team have extended up to 4 years).
Pay: $65.00 per hour (USD 65 - 65 per hourly).
Work location: Hybrid remote in New York, NY 10001.

View full job page →

Today

Sr. Cloud and AI Security Engineer

Maxonic, Inc. Dublin, CA

Dublin, CA

Today

$150k - $160k/yr Full time Ai Security Application Security Application Security Posture Management

Apply Now

Job Description

Maxonic, Inc. is seeking a Senior Cloud and AI Security Engineer to design, implement, and maintain security tooling for protecting cloud workloads. This role focuses on posture management, data and application security controls, Zero Trust network capabilities, and automation to support threat remediation, with close collaboration across security governance and business teams.

Location and Work Schedule

Location: Dublin, CA (onsite)
Job type: Fulltime
Work location: In person

Salary

Compensation: USD 150,000 - 160,000 per year

Key Responsibilities

Design, implement, and maintain security tools used to monitor and protect company cloud workloads.
Identify and mitigate cloud-based security risks.
Develop and implement security controls, including container security, data security posture management, application security posture management, SaaS security posture management, and a zero trust network.
Build automation scripts to support threat remediation workflows.
Partner with Governance, Risk, and Compliance (GRC) teams to align security roadmaps with business goals.
Implement and manage posture management systems along with general cloud security capabilities, including log management, cloud-native workload protection, context-aware access policies, secure web gateways, and data security.
Collaborate with the Information Security Governance, Risk, and Compliance team to produce global cloud security technical designs, architecture standards, and maturity roadmaps.
Develop and maintain documentation, technical diagrams, and self-healing automation scripts for security tools, system environments, and cloud operations.
Act as a Subject Matter Expert (SME) and lead assessment, evangelization, and adoption of new security tools, applications, and processes across cloud security domains, including posture management, logging and monitoring, secure hybrid access solutions, data pipeline security, and AI posture management.
Understand business objectives, supporting systems, and processes across key business areas, aligning technical solutions with enterprise needs while balancing strong security controls with compatibility and operational efficiency.

Required Qualifications

Minimum 10 years of Information Security experience, including 5+ years in large enterprise environments.
Bachelor’s degree or equivalent experience; cloud security certification preferred.
Strong knowledge of security threats, detection and response, security analytics, and automation/orchestration tools.
Ability to work independently and within teams to deliver technical solutions.
Experience developing security strategies, standards, and architectures aligned with industry frameworks.
Ability to improve security posture using technical, administrative, and physical controls.
Experience collaborating with IT teams to design and implement enterprise security solutions.
Experience selecting, configuring, and implementing security tools aligned with business needs.
Knowledge of identity and access management, Zero Trust principles, and secure access solutions.
Strong documentation and communication skills to translate security requirements into actionable designs.

Education

Bachelor’s degree or equivalent experience

Relevant Technologies

Zero trust network
Container security
Data security posture management
Application security posture management
SaaS security posture management
Posture management systems
Log management
Cloud-native workload protection
Context-aware access policies
Secure web gateways
Secure hybrid access solutions
Data pipeline security
AI posture management
Automation/orchestration tools
Self-healing automation scripts
Identity and access management

Application Information

Please apply with your most current resume.
For additional details, contact Surya Prakash at surya.prakash@maxonic.com or (408) 400-2314.

Physical Requirements (ADA)

Ability to work in an office environment, primarily on a computer.
Requires sitting, standing, walking, hearing, talking on the telephone, attending in-person meetings, typing, and working with paper/files.
Consistent timeliness and regular attendance.
Vision requirements: ability to see information in print and/or electronically.

Behavioral and Leadership Competencies

People: Building Effective Teams, Developing Talent, Collaboration
Self: Leading by Example, Communicates Effectively, Ensures Accountability and Execution, Manages Conflict
Business: Business Acumen, Plans, Aligns and Prioritizes, Organizational Agility
Position-related emphasis: Strong Analytical Skills, Navigate Ambiguity, Solution oriented leadership

Additional Information

The role is onsite in Dublin, CA.

View full job page →

Cloud Native Workload Protection Engineer Jobs

Senior Security Engineer - Container & Cloud Security

Sr. Cloud and AI Security Engineer

Get Cloud Native Workload Protection Engineer Jobs alerts