Cloud Security Engineer – Hybrid | AI-Driven Security

Brightspot; Reston (VA); Ibrido; USD 130.000 - 140.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Dental insurance

Vision insurance

Paid vacation

Paid sick leave

Public holidays

401(k) match

Education stipend

Sabbatical after 5 years

Descrizione del lavoro

Brightspot is seeking a hands-on Security Engineer to protect our AI-powered CMS platform. You will harden cloud infrastructure, investigate security issues, and partner with Engineering, Platform, QA, and IT to embed security into daily workflows.

The role emphasizes ownership, autonomy, and tackling complex security challenges end-to-end, with opportunities to influence security posture across the company.

Competenze

• 3+ years of hands-on security engineering in a software environment.
• Experience securing cloud environments (AWS/Azure/GCP) and DevOps pipelines.
• Strong networking and secure configuration management fundamentals.
• In-depth knowledge of IaC workflows and securing IaC.
• Proven ability to identify vulnerabilities and drive remediation.

Mansioni

• Drive security projects from scoping to completion with across-team collaboration.
• Investigate security incidents, incidents, and alerts as a hands-on member.
• Identify and plan resolution for security issues; contribute code via PRs.
• Work with CSPM, vulnerability management, and GRC tooling to close risks.
• Improve alerting, monitoring, and production observability for security events.
• Collaborate with Engineering, Platform, QA, and IT to embed security into workflows.
• Communicate risks and remediation plans clearly to technical and non-technical audiences.

Conoscenze

Security engineering

Cloud security

DevOps experience

Networking fundamentals

Scripting

IaC security

Incident response

Communication skills

Cross-functional collaboration

Strumenti

Terraform

Pulumi

Cloud security tools

SAST/DAST tools

SIEM tooling

Descrizione del lavoro

Brightspot is seeking a hands-on Security Engineer to protect our AI-powered CMS platform. You will harden cloud infrastructure, investigate security issues, and partner with Engineering, Platform, QA, and IT to embed security into daily workflows.

The role emphasizes ownership, autonomy, and tackling complex security challenges end-to-end, with opportunities to influence security posture across the company.