Cloud Security Engineer: CSPM, Guardrails & Automation

Saronic; San Diego (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Saronic is seeking a Security Engineer to own cloud security posture across a multi-account AWS environment, including GovCloud. You will design secure-by-default patterns, build guardrails, and automate evidence for audits. Collaborate across security, IT, and engineering teams to ship features securely.

The role emphasizes automation, scalable CSPM, and proactive remediation, with strong emphasis on IAM, GuardDuty, Config, and third‑party tooling.

Qualifications

• 3+ years hands-on cloud security, infrastructure security, or DevSecOps experience.
• Experience building guardrails and automation to enforce secure-by-default patterns.
• Ability to design and implement multi-account CSPM with remediation and evidence for audits.

Responsibilities

• Own continuous cloud security posture across commercial AWS and GovCloud.
• Develop reusable guardrails and policy-as-code to prevent misconfigurations.
• Lead threat detection, incident response, and automated remediation with cloud-native tools.

Skills

Cloud security

Security automation

AWS security

IAM least-privilege

Terraform

Threat detection

Tools

Terraform

Prowler

CloudTrail

GuardDuty

Config

Security Hub

Job description

Saronic is seeking a Security Engineer to own cloud security posture across a multi-account AWS environment, including GovCloud. You will design secure-by-default patterns, build guardrails, and automate evidence for audits. Collaborate across security, IT, and engineering teams to ship features securely.

The role emphasizes automation, scalable CSPM, and proactive remediation, with strong emphasis on IAM, GuardDuty, Config, and third‑party tooling.