Hands-on Cloud Security Engineer role focused on AWS-first security engineering, detection tuning, and vulnerability management.

Design, build, and maintain security controls as code across cloud environments, including posture hardening and account-level guardrails
Own vulnerability management end-to-end: triage findings across environments, prioritize to reduce noise, and drive remediation to closure
Run the recurring alert-review workflow: tune detections, cut false positives, and improve coverage over time
Build and maintain log-ingestion and SIEM pipelines; participate in incident response activities
Partner with engineers and product managers on architecture, authentication, and application security reviews, including code review and automated testing
Support FedRAMP and other compliance efforts: documentation upkeep, alert monitoring, evidence collection, training exercises, and customer security questionnaires

5+ years of experience in security engineering with hands-on ownership of cloud security work
Deep, hands-on experience securing AWS and/or Azure, including containerized and Kubernetes workloads (EKS/AKS)
Experience building and managing security controls as code using Terraform and Python (or comparable tooling)
Ability to author and tune detections and SIEM rules, and run vulnerability and container-image scanning in CI
Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, including evidence practices
Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises
Bachelor’s degree in a technical field, or equivalent working experience

Location: Boston, MA (hybrid)

Salary: USD 110,000 - 150,000 per year

Minimum Experience: 5 years

Cloud Security Engineer

Job Description