Cloud Security Engineer: Guardrails, CSPM & GovCloud

Saronic Technologies; San Diego (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental and Vision Insurance

401(k) Plan with company match

Stock options

Parental Leave

Generous PTO and holidays

Life and Disability Insurance

Pet Insurance

Free lunch and beverages

Job summary

Saronic Technologies is hiring a Security Engineer to own the cloud security posture across commercial AWS and AWS GovCloud for an autonomous fleet. You will design secure-by-default patterns, automate guardrails, and drive remediation based on real attack paths.

Collaborate with Product Security, Infrastructure, and IT teams to keep a multi-account environment secure, compliant, and auditable throughout its lifecycle. A U.S. security clearance may be required.

Qualifications

• 3+ years of hands-on cloud security, infrastructure security, or DevSecOps experience.
• Depth in AWS security services and architecture (IAM, Organizations/SCPs, CloudTrail, Config, GuardDuty, Security Hub, KMS, VPC).
• Strong infrastructure-as-code (Terraform) and policy-as-code experience.
• Hands-on cloud vulnerability management and CSPM tooling (e.g., Prowler), with remediation track record.
• Experience building guardrails or patterns adopted without friction.
• Proficiency in scripting for security automation.
• Ability to obtain and maintain a U.S. security clearance.

Responsibilities

• Own continuous cloud security posture management (CSPM) across all cloud accounts; map controls to frameworks and keep evidence current.
• Run cloud vulnerability management at scale; prioritize by attack path and automate remediation.
• Build reusable guardrails and policy-as-code to make secure paths easy.
• Design least-privilege IAM across accounts; govern secrets and encryption patterns.
• Tuning detections (CloudTrail, GuardDuty, Config, Security Hub) and support SOC investigations.

Skills

Cloud security

DevSecOps

Terraform

Prowler

Scripting

IAM least-privilege

Security automation

Tools

Terraform

Prowler

CloudTrail

GuardDuty

Config

Security Hub

KMS

Job description

Saronic Technologies is hiring a Security Engineer to own the cloud security posture across commercial AWS and AWS GovCloud for an autonomous fleet. You will design secure-by-default patterns, automate guardrails, and drive remediation based on real attack paths.

Collaborate with Product Security, Infrastructure, and IT teams to keep a multi-account environment secure, compliant, and auditable throughout its lifecycle. A U.S. security clearance may be required.