Cloud Security Engineer — DevSecOps

Yardstik; Minneapolis (MN); Hybrid; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health Insurance Plan

401k Retirement Plan

Health Savings Account

Liberal Vacation Policy

Career acceleration

Job summary

Yardstik is seeking a SecOps Engineer to own security of our platform and cloud infrastructure, collaborating with engineering and operations to identify, mitigate, and prevent security risks across our cloud environment, applications, and data systems.

You will implement least-privilege IAM, threat detection, incident response, and compliance enablement while maintaining the reliability our platform depends on.

Qualifications

• Strong Linux systems administration with security hardening experience (CIS).
• Deep experience with AWS security services: IAM, GuardDuty, Security Hub, CloudTrail, Config, KMS.
• Experience with IAM design principles: least-privilege, RBAC/ABAC, service control policies, and cross-account access patterns.

Responsibilities

• Serve as a security SME for the Technology organization, advising engineering teams on secure architecture, configurations, and operational practices.
• Manage and harden AWS cloud infrastructure using Terraform and IaC, with a focus on security controls, audit logging, and compliance.
• Build and maintain security monitoring, alerting, and detection pipelines using SIEM tools, log aggregation, and anomaly detection.
• Perform vulnerability management: scanning, triaging, remediation tracking, and reporting.
• Design and enforce network security controls including VPCs, security groups, WAF rules, and DDoS mitigation strategies.

Skills

Cloud security

AWS

IAM

Threat modeling

Incident response

Education

Bachelor's degree in CS or related field

Tools

Terraform

Snyk

Splunk

DataDog

Kubernetes

Job description

Yardstik is seeking a SecOps Engineer to own security of our platform and cloud infrastructure, collaborating with engineering and operations to identify, mitigate, and prevent security risks across our cloud environment, applications, and data systems.

You will implement least-privilege IAM, threat detection, incident response, and compliance enablement while maintaining the reliability our platform depends on.