Sr Infrastructure Cloud Security Engineer - AWS - Remote

situsamc; Deutschland; Remote; EUR 116.000 - 155.000; Vollzeit

Zusammenfassung

SitusAMC is seeking a seasoned VP-level Cloud & Application Security leader to define strategy and drive security across AWS and Azure environments. The role blends architecture review, threat modeling, and hands-on validation to protect data and infrastructure.

You will partner with engineering leadership to embed security into roadmaps, implement zero-trust, and mature the AppSec program through SDLC, code scanning, and policy development.

Qualifikationen

• 8+ years in security engineering with cloud and application security.
• 2+ years in AVP or equivalent leadership role.
• Certifications such as CISSP, CEH, GIAC, or CISM preferred.
• Strong scripting (Python/PowerShell) and Terraform experience.
• Familiarity with AWS and Azure, Docker and Kubernetes.

Aufgaben

• Design, implement, and maintain cloud security controls for infrastructure and applications.
• Lead IAM, network segmentation, PAM, CI/CD security, and container security.
• Monitor cloud security incidents and perform root-cause analysis.
• Collaborate with engineering to bake security into roadmaps and coding standards.
• Develop and update security policies to maintain regulatory compliance.

Kenntnisse

Cloud security

Security architecture

IAM & PAM

Threat modeling

Scripting

Ausbildung

Bachelor's degree in technical field

Tools

AWS

Azure

Docker

Kubernetes

Terraform

Jobbeschreibung

SitusAMC is where the best and most passionate people come to transform our client's businesses and their own careers. Whether you're a real estate veteran, a passionate technologist, or looking to get your start, join us as we work together to realize opportunities for everyone, we proudly serve.

At SitusAMC, we are looking to match your unique experience with one of our amazing careers, so that we can help you realize your potential and career growth within the Real Estate Industry. If you are someone who can be yourself, advocate for others, stay nimble, dream big, own every outcome, and think global but act local - come join our team!

The VP of Cloud & Application Security isn't just a strategist but must be deeply technical, capable of rolling up their sleeves, and leading complex security initiatives across modern cloud environments and application stacks. This leader will define strategy, drive execution, and personally dive into architecture reviews, threat modeling, and hands‑on validation when needed.

You will play a pivotal role in safeguarding our organization's sensitive data and infrastructure within the cloud environment. Your responsibilities will include designing, implementing, and maintaining robust security measures to protect against cyber threats. You will collaborate with cross‑functional teams to ensure compliance with industry standards and regulations, while also staying abreast of emerging security trends and technologies. Your expertise will be instrumental in mitigating risks and safeguarding our organization's digital assets in cloud platform like AWS and Microsoft Azure.

Essential Job Functions

• Help build and define our cloud and application security posture. Enable cyber resilience. Help implement various zero trust initiatives.
• Design, implement, and maintain comprehensive security controls for cloud hosted infrastructure, applications and data.
• Lead hardening efforts such as IAM, network segmentation, PAM, workload protection, CI/CD integration, container/Kubernetes security, etc.
• Evaluate and implement cloud-native and third‑party security tooling
• Monitor and respond to cloud security incidents and lead root cause analysis in a timely manner
• Mature existing AppSec program, including security SDLC, code scanning, SCA, threat modeling, and pen testing.
• Partner directly with engineering leaders to bake security into product roadmaps
• Design and implement secure coding standards and developer education programs
• Support hands‑on code review and validation for high‑risk or high‑impact applications
• Develop and implement security policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirements as it relates to cloud engineering.
• Stay up‑to‑date with the latest security trends, threats, and technologies to continuously improve our security posture
• Provide guidance and training to internal teams on cloud and AppSec practices
• Define KPIs and metrics that make security measurable and transparent
• Drive a culture of security across engineering, development, and product teams

Qualifications/ Requirements

• Bachelor's degree in a technical field from an accredited college/university, or equivalent job experience.
• Minimum of 8+ years of industry and/or relevant experience, typically with 2+ years in an AVP level role or external equivalent.
• At least 7 years of direct relevant work experience in cloud security engineering, application/product security or a similar role
• Relevant certifications such as CISSP, CEH, GIAC, ISSAP, CISM or other relevant security-focused certifications preferred
• Familiarity with cloud security principles and technologies (e.g., AWS and Azure).
• Highly motivated self‑starter that can manage multiple deliverables independently in a fast‑paced environment
• Broad knowledge across the security, insider threat, risk management and compliance domains.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Terraform)
• Familiarity with container security technologies (Docker, Kubernetes).
• Have familiarity with infrastructure as code (IaC) tooling
• Knowledge of encryption and key management practices.
• Excellent risk based problem‑solving, analytical, and communication skills.
• Ability to work independently and as part of a team.

Note: This job description is not intended to be all inclusive or exclusive. At any time, employees may perform other related duties as required to meet the ongoing needs of the organization and participate in additional trainings. SitusAMC does not accept unsolicited resumes from staffing agencies, search firms or any third parties. Any unsolicited resume submitted to SitusAMC in any manner will be considered SitusAMC property, and SitusAMC will not pay a fee for any placement resulting from the receipt of an unsolicited resume.

The annual full time base salary range for this role is $135,000.00 - $180,000.00

Specific compensation is determined through interviews and