Cloud Security Engineer

PlayOn Sports; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision insurance

Employee equity

Open PTO policy

401K with company match

Hybrid/flexible work environment

Job summary

PlayOn is seeking a Cloud Security Engineer to secure our multi-cloud environment across GCP and AWS. You’ll own the security posture, automate guardrails in delivery pipelines, and help scale enterprise AI services like Bedrock and Gemini Enterprise.

This is a hands‑on role focused on security as code and scalable protection across traditional cloud workloads and emerging generative AI systems. This role emphasizes CI/CD integration, container security with EKS, and implementing robust

Qualifications

• Hands-on experience securing both GCP and AWS in production environments.
• Strong working knowledge of Terraform and an infrastructure-as-code mindset.
• Proficiency with GitHub-based workflows and integrating security into CI/CD pipelines.
• Experience with cloud security posture management tooling such as CrowdStrike CSPM and Prowler.
• Practical experience securing Kubernetes, ideally Amazon EKS.
• Solid grasp of cloud IAM, networking, encryption, and logging fundamentals.
• Scripting ability in Python, Go, or a similar language for automation.
• Hands-on experience with SIEM platforms for log aggregation, detection, and security monitoring.

Responsibilities

• Design, implement, and maintain security controls across GCP and AWS, including IAM, network segmentation, encryption, logging, and key management.
• Operate and tune CrowdStrike Falcon Cloud Security (CSPM) to continuously monitor cloud posture, triage misconfigurations, and drive remediation across accounts and projects.
• Run and extend Prowler assessments to benchmark environments against CIS, NIST, and internal standards, integrating findings into automated reporting and ticketing workflows.
• Build and maintain security infrastructure as code using Terraform, ensuring controls are versioned, peer-reviewed, and consistently applied across environments.
• Embed security into CI/CD pipelines through GitHub (Actions, branch protection, secret scanning, dependency review) so issues are caught before they reach production.
• Secure containerized workloads running on Amazon EKS, covering cluster hardening, RBAC, network policies, image scanning, and runtime protection.
• Define and enforce security guardrails for enterprise AI adoption, including data governance, access controls, prompt/output safeguards, and monitoring for Amazon Bedrock and Google Gemini Enterprise.
• Develop and design agentic security detection and response capabilities, with a focus on scaling existing processes leveraging AI.
• Investigate and respond to cloud security incidents, perform root‑cause analysis, and lead improvements that prevent recurrence.
• Develop automation and tooling to reduce manual effort, improve detection coverage, and provide clear, actionable metrics to leadership.

Skills

GCP Security

AWS Security

Terraform

GitHub Actions

CrowdStrike CSPM

Prowler

Kubernetes / EKS

Python/Go scripting

SIEM

Tools

CrowdStrike CSPM

Prowler

GitHub Actions

Amazon EKS

Terraform

Job description

PlayOn is looking for a Cloud Security Engineer to secure our multi-cloud environment across Google Cloud Platform (GCP) and Amazon Web Services (AWS). You'll own the security posture of our cloud infrastructure, automate guardrails into our delivery pipelines, and help safely scale our adoption of enterprise AI services like Amazon Bedrock and Google Gemini Enterprise. This is a hands‑on engineering role for someone who treats security as code, thinks in terms of detection and prevention rather than checklists, and wants to shape how a fast moving organization secures both traditional cloud workloads and emerging generative AI systems.

In this role, you can expect to

• Design, implement, and maintain security controls across GCP and AWS, including IAM, network segmentation, encryption, logging, and key management.
• Operate and tune CrowdStrike Falcon Cloud Security (CSPM) to continuously monitor cloud posture, triage misconfigurations, and drive remediation across accounts and projects.
• Run and extend Prowler assessments to benchmark environments against CIS, NIST, and internal standards, integrating findings into automated reporting and ticketing workflows.
• Build and maintain security infrastructure as code using Terraform, ensuring controls are versioned, peer-reviewed, and consistently applied across environments.
• Embed security into CI/CD pipelines through GitHub (Actions, branch protection, secret scanning, dependency review) so issues are caught before they reach production.
• Secure containerized workloads running on Amazon EKS, covering cluster hardening, RBAC, network policies, image scanning, and runtime protection.
• Define and enforce security guardrails for enterprise AI adoption, including data governance, access controls, prompt/output safeguards, and monitoring for Amazon Bedrock and Google Gemini Enterprise.
• Develop and design agentic security detection and response capabilities, with a focus on scaling existing processes leveraging AI.
• Investigate and respond to cloud security incidents, perform root‑cause analysis, and lead improvements that prevent recurrence.
• Develop automation and tooling to reduce manual effort, improve detection coverage, and provide clear, actionable metrics to leadership.

To thrive in this role, you have

• 5+ years in cloud security, security engineering, or a closely related role.
• Hands‑on experience securing both GCP and AWS in production environments.
• Strong working knowledge of Terraform and an infrastructure‑as‑code mindset.
• Proficiency with GitHub‑based workflows and integrating security into CI/CD pipelines.
• Experience with cloud security posture management tooling such as CrowdStrike CSPM and Prowler.
• Practical experience securing Kubernetes, ideally Amazon EKS.
• Solid grasp of cloud IAM, networking, encryption, and logging fundamentals.
• Scripting ability in Python, Go, or a similar language for automation.
• Hands‑on experience with SIEM platforms for log aggregation, detection, and security monitoring.

Nice to Have

• Experience securing or governing enterprise AI / LLM platforms such as Amazon Bedrock or Google Gemini Enterprise.
• Experience developing Agentic Security capabilities.
• Familiarity with security frameworks (CIS Benchmarks, NIST, SOC 2, ISO 27001).
• Detection engineering or threat‑modeling experience.
• Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS Security Specialty, CKS, CISSP)

How You Play

• Ownership over Participation – You take responsibility for achieving holistic outcomes, prioritize key objectives, and adapt quickly when situations require a different approach. You follow through even against the toughest challenges.
• Team over Stars – You are a bridge builder, establishing processes and relationships with teams outside your own. You work to rally around common goals, find win‑win solutions, compromise when necessary, and help others succeed.
• Growth over Comfort – You are driven by a desire to grow and actively seek opportunities to expand your comfort zone, skills, and confidence. You embrace new challenges with curiosity, accepting discomfort and failure as opportunities to learn.
• Fairness over Popularity – You approach decisions with a scientist’s mindset, challenging your assumptions and remaining objective. You consider long‑term impact rather than relying on short‑term gains, proactively seek others’ perspectives, and manage emotions in decision‑making.

PlayOn is where high school sports come to life. Through GoFan, NFHS Network, and MaxPreps, we give every fan a front‑row seat to the moments that matter most: the buzzer‑beaters, the comeback wins, the senior nights, the rivalries that define a town. We built our technology for the people who live and breathe high school athletics — the parents who never miss a game, the alumni still cheering from across the country, the communities that show up week after week. From buying tickets to watching a live stream to reliving the highlights, we make it simple to stay close to the sports and the athletes you love most. Backed by KKR, we build the technology that powers high school athletics from the inside out: Schools trust us to handle ticketing, streaming, fundraising, concessions, merchandise, and more so the people running programs can stay focused on the athletes and fans we all serve together. We're a growth‑stage company on a mission to make high school sports more accessible, more memorable, and more connected than ever before. When being there means everything, we make sure you never miss a moment.

Why You'll Love Working at PlayOn

Product, potential, and people. We’re a leader in the high school event space, constantly evolving our product to meet the needs of administrators. We focus on solving real challenges, learning quickly, and creating impactful solutions. This is a growth‑stage company, meaning your contributions have real impact. You’ll have opportunities to grow your skills, tackle meaningful problems, and make a difference in the lives of schools and the students and fans they serve. Our culture is built on accountability, collaboration, growth, and fairness. We don’t just show up—we show up for each other. Everyone wears the same jersey, and we play hard, make the extra pass, and cheer one another on. Losses teach us, challenges motivate us, and persistence drives us forward. We value integrity over shortcuts, choosing to do what’s right even when it’s hard. Together, we strive to be better every day—because we know that’s how we win as a team.

The Benefits We Offer

• Multiple medical insurance plans to choose from
• Dental, vision life and disability insurance
• Employee Emergency Fund
• Company equity (stock options)
• Open PTO policy
• 401K plan with company match
• Hybrid/flexible work environment

Note: Must be a full‑time employee to participate in the company’s employee health benefit plan. Part‑time employees and interns are not eligible to participate