Cloud Security Engineer

hextechnologies; United States; Remote; USD 199,000 - 295,000; Full time

Benefits offered by this job

Market-based compensation with equity

Comprehensive health benefits

Flexible paid time off

Job summary

hextechnologies is seeking a senior Cloud Security Engineer to harden a cloud-native platform built on AWS and Kubernetes. You will work with infrastructure and product engineering teams to set security strategy, embed protections into the software delivery lifecycle, and lead incident response across production environments.

The role covers architecture, threat modeling, compliance enablement, and mentoring across the engineering organization, with a focus on secure-by-default patterns and

Qualifications

• 5+ years of hands-on cloud security engineering experience with deep AWS expertise.
• Strong Kubernetes security background including cluster hardening, RBAC, network policies, and container vulnerability management.
• Expert-level proficiency with Terraform for infrastructure-as-code.
• Working familiarity with AWS-native security services such as IAM, GuardDuty, Security Hub, CloudTrail, and WAF.
• Exposure to CNAPP platforms and modern cloud-focused SIEM tooling.
• Solid grasp of secure SDLC, CI/CD security, and DevSecOps methodologies.
• Strong communication, problem-solving, and cross-functional leadership skills.

Responsibilities

• Architect, deploy, and operate security controls across AWS accounts and Kubernetes clusters, including isolation and sandboxing strategies for a hosted runtime environment
• Build and maintain infrastructure-as-code with Terraform, enforcing security standards through code, review, and policy-as-code
• Conduct threat modeling, security assessments, and audits of AWS infrastructure and container deployments
• Embed DevSecOps practices into CI/CD pipelines in partnership with development and operations teams
• Monitor, triage, and lead response to cloud security incidents, including root-cause analysis and remediation planning
• Advise on compliance initiatives spanning frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS
• Mentor engineers and advocate for secure-by-default patterns across the organization

Skills

AWS security

Kubernetes security

DevSecOps

Tools

Terraform

IAM

GuardDuty

Security Hub

CloudTrail

WAF

Job description

Role overview

A senior-level Cloud Security Engineer is needed to harden and defend a cloud-native platform built primarily on AWS and Kubernetes. The role partners closely with infrastructure and product engineering teams to set security strategy, embed protections into the software delivery lifecycle, and lead response to incidents affecting production environments. The scope spans architecture, implementation, threat modeling, compliance enablement, and mentoring across the engineering organization.

Responsibilities

• Architect, deploy, and operate security controls across AWS accounts and Kubernetes clusters, including isolation and sandboxing strategies for a hosted runtime environment
• Build and maintain infrastructure-as-code with Terraform, enforcing security standards through code, review, and policy-as-code
• Conduct threat modeling, security assessments, and audits of AWS infrastructure and container deployments
• Embed DevSecOps practices into CI/CD pipelines in partnership with development and operations teams
• Monitor, triage, and lead response to cloud security incidents, including root-cause analysis and remediation planning
• Advise on compliance initiatives spanning frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS
• Mentor engineers and advocate for secure-by-default patterns across the organization

Requirements

• 5+ years of hands‑on cloud security engineering experience with deep AWS expertise
• Strong Kubernetes security background, including cluster hardening, RBAC, network policies, and container vulnerability management
• Expert‑level proficiency with Terraform for infrastructure-as-code
• Working familiarity with AWS‑native security services such as IAM, GuardDuty, Security Hub, CloudTrail, and WAF
• Exposure to CNAPP platforms and modern cloud‑focused SIEM tooling
• Solid grasp of secure SDLC, CI/CD security, and DevSecOps methodologies
• Strong communication, problem‑solving, and cross‑functional leadership skills

Nice to have

• AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or Terraform Associate credentials
• Offensive‑security or SANS‑style certifications

Benefits and work setup

• Market‑based compensation with equity participation
• Comprehensive health benefits and flexible paid time off
• Posted salary range of $198,750 – $295,000, with final placement influenced by experience, demonstrated skills, and interview performance