Autonomous Systems Security & Cloud Infra Engineer

Engg; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Nexxa is seeking a seasoned security/compliance engineer to own our SOC 2 Type 2 and ISO 27001 programs across our multi-account AWS and GCP environment. You will drive evidence collection, control monitoring, audits, and policy refresh while shaping the security posture of our AI management platform.

You will triage security findings, implement IaC remediations, manage IAM and access lifecycle, and serve as the main interface to auditors and procurement reviews.

Qualifications

• Professional security engineering experience across security, networking, and OS.
• Hands-on with cloud platforms beyond the console (AWS/GCP).
• Strong scripting in Python, Bash, Go or similar.

Responsibilities

• Own SOC 2 Type 2 and ISO 27001 compliance calendars and audits.
• Triage security findings across cloud posture, code scanning, and dependencies.
• Remediate security issues in infrastructure as code and pipelines.
• Manage IAM, SSO/federation, and least-privilege access across cloud/SaaS.
• Interface with auditors and customers during reviews.
• Implement guardrails and automated controls in CI/CD and software supply chain.

Skills

Security fundamentals

Cloud infrastructure

Linux administration

Networking

Scripting

Written communication

Education

CS/CE degree or equivalent

Tools

Terraform

Pulumi

AWS

GCP

SSO/SAML/OIDC

Job description

Nexxa is seeking a seasoned security/compliance engineer to own our SOC 2 Type 2 and ISO 27001 programs across our multi-account AWS and GCP environment. You will drive evidence collection, control monitoring, audits, and policy refresh while shaping the security posture of our AI management platform.

You will triage security findings, implement IaC remediations, manage IAM and access lifecycle, and serve as the main interface to auditors and procurement reviews.