Cloud Security Engineer

Cybersecurity Jobs; San Antonio (TX); On-site; USD 92,000 - 153,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

401(k) Retirement Plan

Discretionary bonus

Job summary

Cybersecurity Jobs is seeking a Cloud Security Engineer in San Antonio, TX, onsite. You will design, implement, and maintain security controls across AWS environments, embedding security into CI/CD pipelines and operational workflows.

You will protect workloads with identity, monitoring, threat detection, and secure operations while ensuring alignment with CIS, NIST, HIPAA, FedRAMP, and SOC 2 frameworks. The role demands 6+ years of experience and a BS in a related field; substitution is allowed

Qualifications

• Minimum experience: 6 years of relevant cloud security and AWS security experience.
• Bachelor’s degree in computer science, cybersecurity, engineering, or related field (substitution: 4 additional years of experience).

Responsibilities

• Design, implement, and maintain security controls across AWS cloud environments.
• Protect cloud workloads with identity management, monitoring, threat detection, and secure operations.
• Develop secure AWS architectures using IAM, KMS, CloudTrail, Config and monitoring tools.
• Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and pen testing.
• Ensure AWS environments align with CIS Benchmarks, NIST, HIPAA, FedRAMP and SOC 2.
• Support incident detection, investigation, and response with audit trails across AWS accounts/services.
• Automate security controls and compliance checks using Terraform and CloudFormation.
• Integrate security into CI/CD pipelines and collaborate with engineering for secure builds and deployments.

Skills

Cloud security expertise

Incident response

CI/CD security integration

Cross-functional collaboration

Scripting

Education

Bachelor's degree in CS/Engineering/C cybersecurity

Tools

IAM

KMS

CloudTrail

Config

Sentry

Datadog

Terraform

CloudFormation

GitHub Actions

AWS CodeBuild

ArgoCD

Helm

Docker

Python

Bash

Job description

The Cloud Security Engineer will design, implement, and maintain security controls for AWS-based environments, with a focus on embedding security into CI/CD and operational workflows. The role also supports incident detection, investigation, and response while ensuring alignment with relevant security and compliance requirements.

Location

San Antonio, TX (onsite)

Compensation

USD 92,000 - 153,000 per year

Experience and Education

• Minimum experience: 6 years of relevant cloud security, cybersecurity, and AWS security experience
• Education: Bachelor’s degree in computer science, cybersecurity, engineering, or a related field
• Substitution: Four additional years of relevant experience may be substituted in lieu of a degree

Responsibilities

• Design, implement, and maintain security controls across AWS cloud environments
• Protect cloud workloads using best practices for identity management, monitoring, threat detection, and secure operations
• Develop secure AWS architectures using services such as IAM, KMS, CloudTrail, Config, and monitoring tools including Sentry and Datadog
• Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing
• Ensure AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2
• Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services
• Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation
• Integrate security into CI/CD pipelines and collaborate with engineering teams to enable secure build and deployment processes

Required Qualifications

• Eligibility: U.S. Citizenship or Green Card required, with ability to obtain a Public Trust clearance
• Strong knowledge of AWS services including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS
• Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement
• Hands-on collaboration experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates
• Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning
• Strong scripting or development experience with Python, Bash, or similar languages
• Proven ability to work independently and collaborate with cross-functional teams to address complex security, operational, and reliability challenges

Technologies

• AWS, IAM, KMS, CloudTrail, Config
• Sentry, Datadog
• Infrastructure as Code, Terraform, CloudFormation
• CI/CD pipelines
• GitHub Actions, AWS CodeBuild, ArgoCD, Helm
• Docker
• Python, Bash
• EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53

Clearance and Travel

• Clearance required: Ability to obtain Public Trust
• Travel required: Up to 10%

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k) Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Care.com annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
• Position may be eligible for a discretionary variable incentive bonus

Additional Information

Job family: Software Development & Support

Nice to Have

• AWS Certified Security – Specialty (highly desirable)
• AWS Certified Solutions Architect or DevOps Engineer certifications
• CISSP, CISM or GIAC certifications