Cloud Security Engineer - AWS, IR & Automation

Hark; San Jose (CA); On-site; USD 150,000 - 300,000; Full time

Job summary

Hark is seeking a hands‑on Member of Technical Staff (Information Security Engineer) to secure our AWS‑driven infrastructure and hardware‑augmented AI platform in San Jose, CA. You will harden AWS environments, manage IAM across the company, and lead detection, response, and post‑incident reviews in a dynamic environment.

This role focuses on building and operating security controls, enforcing zero‑trust networking, and evaluating third‑party vendors for risk, while advancing automation to

Qualifications

• 4-8 years of hands‑on security engineering experience in cloud and infrastructure security.
• Deep fluency in AWS security (IAM, Organizations/SCPs, CloudTrail, EKS), network hardening, and cloud posture tooling like Wiz (or equivalent).
• Experience with detection engineering and incident response using tools like GuardDuty and CrowdStrike (or equivalent); you've triaged real alerts and contained real incidents.
• Ability to read and review infrastructure‑as‑code (Pulumi, Terraform, or similar) for security issues.
• Comfort writing code and automation (Python, Go, or similar) to eliminate manual security work.
• Experience administering identity and endpoint platforms like Google Workspace as IdP, Kandji, and CrowdStrike (or equivalent IdP, MDM, and EDR tools).

Responsibilities

• Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations.
• Own identity and access: SSO, least‑privilege IAM, just‑in‑time access, secrets management, and access reviews.
• Build and maintain detection and alerting pipelines; lead triage, containment, and post‑incident review.
• Secure the corporate environment: endpoint management, SaaS security posture, and zero‑trust network access.
• Evaluate third‑party vendors and integrations for security and privacy risk.
• Build the technical controls and evidence behind our compliance programs (SOC 2, GDPR) as automation, not spreadsheets.

Skills

AWS Security

Cloud security

Incident response

IAM & access

IaC review

Scripting (Python/Go)

Identity management

Detection engineering

Zero trust

Tools

Wiz

GuardDuty

CrowdStrike

Pulumi

Terraform

KMS

Google Workspace as IdP

Kandji

Cloudflare

HashiCorp Vault

Job description

Hark is seeking a hands‑on Member of Technical Staff (Information Security Engineer) to secure our AWS‑driven infrastructure and hardware‑augmented AI platform in San Jose, CA. You will harden AWS environments, manage IAM across the company, and lead detection, response, and post‑incident reviews in a dynamic environment.

This role focuses on building and operating security controls, enforcing zero‑trust networking, and evaluating third‑party vendors for risk, while advancing automation to