Cloud & AppSec Security Engineer (Remote)

Worth AI; Tampa (FL); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health Care Plan

Retirement Plan

Life Insurance

Flexible PTO

Holidays

Family Leave

Remote

Hybrid work

Free Food

Wellness Resources

Job summary

This role is project-driven: you'll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You'll work closely with engineering, IT, and compliance, so clear communication and follow-through matter as much as technical depth.

In-office presence is expected three days per week, with a hybrid setup for eligible roles.

Qualifications

• 2–4 years of experience in a security engineering/security analyst role.
• Hands-on experience with AWS security services and concepts (IAM, VPC, GuardDuty, Security Hub, CloudTrail).
• Practical experience with vulnerability management tools and remediation workflows.
• Working knowledge of OWASP Top 10, SAST/DAST, and dependency scanning.
• Experience managing a ticket queue against SLAs with ownership and follow-through.
• Strong written and verbal communication skills and cross-functional collaboration.

Responsibilities

• Vulnerability Management (Primary Focus): Own the scanning program across endpoints, servers, and cloud infrastructure; triage and track findings; report on SLAs.
• Cloud Security (AWS): Monitor and harden AWS environments, implement guardrails and baseline configurations, and respond to security alerts.
• Application Security: Support SAST/DAST and integrate into CI/CD; participate in secure code reviews and threat modeling.
• Security Operations & Ticketing: Triage and resolve security tickets; document decisions and remediation status; cross-functional projects.
• Project & Cross-Functional Work: Lead security initiatives, tooling rollouts, audits and compliance prep; collaborate with engineering, IT, and compliance.

Skills

Vulnerability management

AWS security services

AppSec concepts

Incident response

Security tooling

Communication

Tools

Wiz

Tenable

Qualys

Snyk

Jira

Linear

Job description

This role is project-driven: you'll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You'll work closely with engineering, IT, and compliance, so clear communication and follow-through matter as much as technical depth.

In-office presence is expected three days per week, with a hybrid setup for eligible roles.