Cloud Security Engineer — Hybrid + Equity Options

Tulip Interfaces; Boston (MA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Company equity

Flexible work schedule

Unlimited vacation

Health benefits

401(k)

Job summary

Tulip Interfaces in Somerville, MA, is seeking a hands-on Security Engineer to mature cloud security, detection, and vulnerability management across our platform. You will operate primarily in AWS, build security controls as code with Terraform and Python, and collaborate with Infrastructure and Product Engineering teams.

Join a hybrid team focused on compliance (FedRAMP, ISO 27001, SOC 2), incident response, and continuous improvement of security posture.

Qualifications

• 5+ years of experience in security engineering with cloud security ownership.
• Hands-on experience securing AWS and/or Azure environments, incl. containerized workloads.
• Security controls as code with Terraform and Python.
• Knowledge of FedRAMP, ISO 27001, or SOC 2 and evidence practices.
• Incident response or forensics experience is a plus.
• Bachelor's degree in a technical field or equivalent experience.

Responsibilities

• Design, build, and maintain security controls as code across cloud environments.
• Own vulnerability management end-to-end and drive remediation to closure.
• Own alert-review workflow: tune detections and reduce false positives.
• Build and maintain log ingestion and SIEM pipelines; participate in incident response.
• Partner with engineers on architecture, authentication, and security reviews.
• Support FedRAMP and other compliance efforts; documentation and training.

Skills

Security engineering

Cloud security

AWS security

Azure security

Kubernetes security

IaC security

Python scripting

Detections & SIEM

Compliance knowledge

Incident response

Education

Bachelor's degree in a technical field

Tools

Terraform

Python

Kubernetes (EKS/AKS)

Job description

Tulip Interfaces in Somerville, MA, is seeking a hands-on Security Engineer to mature cloud security, detection, and vulnerability management across our platform. You will operate primarily in AWS, build security controls as code with Terraform and Python, and collaborate with Infrastructure and Product Engineering teams.

Join a hybrid team focused on compliance (FedRAMP, ISO 27001, SOC 2), incident response, and continuous improvement of security posture.