Cloud Security Engineer — AWS, Terraform & CI/CD

First Connect Insurance Services, LLC; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Private medical care

MultiSport

Cafeteria budget

Glasses reimbursement

Team building events

Job summary

First Connect Insurance Services is seeking a hands-on Cloud Security Engineer to lead secure cloud infrastructure across AWS and IaC. You will implement guardrails, run security tooling, and automate vulnerability management in collaboration with DevOps, R&D, and business partners in Poland, Israel, and the US.

The role emphasizes securing AI integrations, building scalable security practices, and aligning with SOC 2 Type II and financial services requirements.

Qualifications

• 6+ years in cloud/infrastructure engineering and information security.
• Production experience securing AWS environments (IAM, networking, encryption, logging).
• Solid Terraform and Kubernetes/ECS experience.
• Strong coding skills in Python/TypeScript/Go and API work.

Responsibilities

• Own the security posture of the cloud estate (AWS IAM, networking, encryption).
• Build security into infrastructure as code (Terraform) and guardrails.
• Deploy and tune CNAPP/CSPM, workload protection, logging and detection.
• Integrate SAST/SCA and IaC scanning into CI/CD pipelines.
• Secure AI tooling and data flows across R&D and product teams.
• Act as the cloud security technical reference for multiple teams.

Skills

Cloud security

AWS security

Automation

Programming (Python/TS/Go)

English proficiency

Polish proficiency

Cross-team collaboration

Tools

Terraform

Kubernetes/ECS

CI/CD tooling

Job description

First Connect Insurance Services is seeking a hands-on Cloud Security Engineer to lead secure cloud infrastructure across AWS and IaC. You will implement guardrails, run security tooling, and automate vulnerability management in collaboration with DevOps, R&D, and business partners in Poland, Israel, and the US.

The role emphasizes securing AI integrations, building scalable security practices, and aligning with SOC 2 Type II and financial services requirements.