Cloud Security Engineer

Remotedxb; Dubai; On-site; AED 350,000 - 600,000; Full time

Benefits offered by this job

Competitive salary and equity

Unlimited PTO

Health, Vision, & Dental coverage

401k match

MacBook Pro setup

Job summary

Polymarket, based in Dubai, is seeking a seasoned cloud security engineer to strengthen its AWS security posture across multiple accounts and regions.

You will implement IaC security, tune detection logic, manage telemetry (CloudTrail, GuardDuty, Security Hub), and drive remediation of findings. You’ll collaborate on audits like SOC 2 or PCI-DSS and work hands-on with Python/TypeScript/Go in a fast-paced, cloud-native environment.

Qualifications

• Cloud security expertise with AWS services and architectures.
• Experience securing IaC and deployment pipelines.
• Ability to assess security risk across cloud architectures.

Responsibilities

• Own and continuously improve Polymarket's AWS security posture across accounts, regions, and services
• Review and contribute to IaC modules that encode security defaults
• Integrate automated security checks into the deployment pipeline
• Own cloud-side security telemetry including CloudTrail, GuardDuty, and Security Hub
• Develop and tune detection logic for cloud-specific threats
• Govern secrets management using AWS Secrets Manager and SSM Parameter Store
• Drive remediation of findings from AWS Inspector and third-party CSPM tooling
• Support audit and compliance activities such as SOC 2 or PCI-DSS

Skills

Cloud security

AWS security

IaC (Pulumi/Terraform/CDK)

Networking fundamentals

Python/TypeScript/Go

Security risk assessment

Tools

Pulumi

Terraform

CDK

Job description

About the Company

Polymarket is the world's largest prediction market platform. We enable individuals to express views on real-world events by trading on outcomes across politics, economics, sports, culture, and current affairs.

Responsibilities

• Own and continuously improve Polymarket's AWS security posture across accounts, regions, and services
• Review and contribute to IaC modules that encode security defaults
• Integrate automated security checks into the deployment pipeline
• Own cloud-side security telemetry including CloudTrail, GuardDuty, and Security Hub
• Develop and tune detection logic for cloud-specific threats
• Govern secrets management using AWS Secrets Manager and SSM Parameter Store
• Drive remediation of findings from AWS Inspector and third-party CSPM tooling
• Support audit and compliance activities such as SOC 2 or PCI-DSS

Requirements

• 4+ years of experience in cloud security or security-focused infrastructure
• Deep expertise with AWS security services (IAM, SCP, GuardDuty, KMS, WAF, etc.)
• Hands‑on experience with Infrastructure as Code (Pulumi, Terraform, or CDK)
• Strong understanding of AWS networking and attack surfaces
• Proficiency in Python, TypeScript, or Go
• Ability to evaluate architectural decisions for security risk

Preferred Qualifications

• Familiarity with Pulumi TypeScript-based stacks
• Familiarity with Web3, blockchain infrastructure, or crypto-sector threat models
• Experience securing containerized workloads on ECS or EKS
• AWS Security Specialty or Solutions Architect Professional certifications
• Exposure to SOC 2 Type II or PCI-DSS cloud control requirements

Benefits

• Competitive salary & equity
• Unlimited PTO
• Full Health, Vision, & Dental coverage
• 401k match
• Hardware setup: new MacBook Pro, big display, & accessories