Cloud Security Engineer — AI-Driven, End-to-End Security

ADP, Inc.; Reston (VA); Hybrid; USD 125,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

3 weeks paid vacation

Sick leave

Paid company holidays

Safe Harbor 401(k)

Education stipend

Sabbatical after 5 years

Job summary

Brightspot is seeking a hands-on Security Engineer to protect our platform and strengthen security posture. You will drive cloud security hardening, investigate issues, and partner with Engineering, Platform, QA, and IT to make security a shared responsibility.

The role emphasizes ownership, autonomy, and delivering end-to-end security initiatives, with a hybrid on-site requirement in Reston, VA.

Qualifications

• 7+ years of hands-on security engineering experience within a software development environment.
• Experience securing cloud environments (AWS/Azure/GCP) and modern DevOps pipelines.
• Strong self-direction with the ability to drive issues to resolution.
• Deep understanding of networking fundamentals and secure configurations.
• Experience with Infrastructure as Code (Terraform or Pulumi).
• Coding/scripting ability to investigate issues and contribute tooling.
• Proven track record of identifying vulnerabilities and remediation in fast-paced settings.
• Familiarity with Cloud Security Posture Management, vulnerability tools, GRC, and SAST/DAST.
• Experience with SOC 2 Type 2 processes and AI-assisted security work.
• Strong cross-functional collaboration with Eng, Platform, QA, IT.

Responsibilities

• Drive security projects independently from scoping to completion across teams.
• Investigate security incidents, alerts, and provide hands-on responses.
• Identify issues and develop remediation plans; contribute code when needed.
• Work with Cloud Security Posture Management, VMs, and GRC tools to close risks.
• Evaluate and improve security tools and processes for maturity.
• Conduct external security assessments and operationalize findings.
• Collaborate with Engineering to secure IaC (Terraform, Pulumi).
• Improve alerting, monitoring, and production observability for security signals.
• Embed security into daily workflows with Engineering, Platform, QA, IT.
• Communicate risks and solutions clearly to technical and non-technical audiences.

Skills

Cloud security

AWS/Azure/GCP

IaC security

Terraform/Pulumi

Code analysis

Threat hunting

AI in security

Security tooling

Communication

Cross-functional collaboration

Tools

Terraform

Pulumi

SAST

DAST

SIEM

Job description

Brightspot is seeking a hands-on Security Engineer to protect our platform and strengthen security posture. You will drive cloud security hardening, investigate issues, and partner with Engineering, Platform, QA, and IT to make security a shared responsibility.

The role emphasizes ownership, autonomy, and delivering end-to-end security initiatives, with a hybrid on-site requirement in Reston, VA.