Cloud Security Engineer, Product Security

Recorded Future; Göteborgs kommun; On-site; SEK 700,000 - 950,000; Full time

Job summary

Recorded Future is seeking a Cloud Security Engineer for Product Security to bolster our infrastructure security across the product stack. You will design and implement scalable security controls, collaborate with engineers and DevOps, and embed security in the development lifecycle.

The role emphasizes threat modeling, risk assessments, and guidance on secure coding practices, with hands-on work in cloud environments and IaC tools.

Qualifications

• 3+ years of professional security engineering experience.
• Strong cloud security knowledge, preferably AWS or GCP.
• Solid Linux knowledge and container orchestration (Kubernetes) experience.
• Coding or scripting in Go or Python is desirable.

Responsibilities

• Design, implement, and deploy scalable security solutions for product infrastructure.
• Assess security risks, conduct threat modeling, and perform design reviews.
• Collaborate with software engineers, DevOps, and product managers to embed security in SDLC.
• Guide engineers on secure coding practices and security design principles.
• Support security tickets and on-call tasks as needed.

Skills

Go

Python

Linux

Cloud security

DevOps

Kubernetes

Threat modeling

Tools

AWS

GCP

Terraform

Security tools

Job description

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

Recorded Future is looking for a Cloud Security Engineer, Product Security to be a vital member of the Infrastructure part of the Product Security team dedicated to supporting all facets and functions of infrastructure Security across Recorded Future. This role is highly collaborative and technical, demanding a proactive approach to embedding security throughout the product development lifecycle and operational processes. The core mission is to safeguard our product infrastructure through a blend of preventative design, responsive investigation, and continuous improvement of security controls.

What You’ll Do:

• Design and Implement Security Solutions: Take ownership of designing, building, and deploying robust, scalable security solutions and infrastructure components. This involves selecting, configuring, and integrating security tools and technologies that enhance the overall security posture of our products and platform, ensuring security is "baked in," not "bolted on."
• Cloud Security Management: Secure our cloud environments by implementing and maintaining robust security controls, monitoring configurations, and ensuring compliance with best practices to protect our infrastructure.
• Security Architecture and Design Review: Serve as a security subject matter expert during the development process in our cloud environments. Conduct comprehensive security reviews, threat modeling, and risk assessments for all proposed new features, architectural changes, and major system updates. Provide actionable feedback to engineering teams to ensure designs meet stringent security standards and comply with internal policies and external regulations.
• Engineering Collaboration and Guidance: Work hand-in-hand with software engineers, DevOps teams, and product managers across the organization. You will offer expert security guidance, answer complex security-related questions, troubleshoot implementation issues, and mentor engineers on secure coding practices and security design principles, fostering a culture of security awareness.
• Product Security Team Participation: Contribute to the Product Security team's daily operational tasks, including maintaining security documentation, managing security-related tickets, participating in on-call rotations as required, and driving initiatives to improve team processes and efficiency.

What You’ll Bring:

• 3+ years of proven relevant professional experience
• Strong cloud security knowledge, preferably AWS or GCP
• Strong foundational knowledge of security principles
• Solid Linux knowledge
• Kubernetes knowledge is a plus
• Background in coding/scripting is desired, preferably Go and/or Python
• A keen interest in finding and balancing security needs with developer productivity
• Excellent communication skills and the ability to effectively build relationships across different teams
• A strong ability to assess risks and make informed decisions
• Experience with Infrastructure-as-Code

Why should you join Recorded Future?

Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6-star user rating on G2 and more than 50% of Fortune 100 companies as customers.

Want more info?

Blog & Podcast: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence

Linkedin, Instagram & Twitter: What’s happening at Recorded Future

The Record: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field

Timeline: History of Recorded Future

Recognition: Check out our awards and announcements

We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles. By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.

Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.

Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.

Recorded Future does not administer a lie detector test as a condition of employment or continued employment.

This is in compliance with the law of the Commonwealth of Massachusetts, and in alignment with our hiring practices across all jurisdictions.

Recorded Future maintains a drug-free workplace.

Note:

Our interview process for all final-round candidates requires a mandatory in-person interview or a live, scheduled video conference with the hiring manager. We do not conduct interviews via instant messaging or text. All communications during the application process will come from individuals within our HR department via their Recorded Future email address.