Cloud Security Engineer: IaC & Threat Modeling

Jobtailor; California (MO); On-site; USD 120,000 - 150,000; Full time

Job summary

Jobtailor is seeking a senior cloud security engineer to design and govern secure, scalable AWS architectures and IaC governance. You will drive CSPM tooling usage, implement secure-by-default patterns for Kubernetes workloads, and own end-to-end security projects from discovery to rollout.

You will collaborate across engineering, product, and security teams, focusing on IAM, encryption, and vulnerability management while aligning with NIST CSF, ISO 27001, SOC 2, and CIS benchmarks.

Qualifications

• Expertise in building security tooling and automation
• Experience enabling secure multi-account AWS architectures
• Ability to implement secure-by-default patterns across cloud and container workloads
• Strong understanding of IAM and least privilege

Responsibilities

• Build and scale Infrastructure as Code governance strategies with security embedded
• Operate and tune CSPM tooling and coordinate remediation
• Investigate security events, triage incidents, and own remediation to resolution
• Architect secure AWS cloud account structures, including landing zones and cross-account roles
• Design secure network architectures with VPCs, subnets, routing, and egress controls
• Embed security across Kubernetes and containerized workloads
• Design IAM role and policy architectures for human and machine identities
• Implement encryption for data at rest and in transit with AWS KMS and related services
• Conduct threat modeling, architecture reviews, and secure design assessments
• Assess and secure AI/ML product architectures and data flows
• Build secure automation using Python, AWS services, and policy-as-code
• Own complex security projects end-to-end from discovery to ownership
• Align cloud security with NIST CSF, ISO 27001, SOC 2, and CIS benchmarks
• Partner with infrastructure, platform, product, and security teams
• Embed security from code to cloud across systems and developer workflows

Skills

AWS Cloud Architecture

Infrastructure as Code

Network Security

IAM Role & Policy Management

Threat Modeling

Python Programming

Go Programming

CSPM Tooling

Encryption & Key Management

Container & OS Hardening

Vulnerability Management

Secure Design Assessments

Automation Development

Security Tooling

Multi-Account Strategies

Education

NIST CSF

ISO 27001

SOC 2

CIS Benchmarks

Tools

AWS KMS

Secrets Manager

HashiCorp Vault

CI/CD Pipelines

Policy-as-Code Frameworks

Job description

Jobtailor is seeking a senior cloud security engineer to design and govern secure, scalable AWS architectures and IaC governance. You will drive CSPM tooling usage, implement secure-by-default patterns for Kubernetes workloads, and own end-to-end security projects from discovery to rollout.

You will collaborate across engineering, product, and security teams, focusing on IAM, encryption, and vulnerability management while aligning with NIST CSF, ISO 27001, SOC 2, and CIS benchmarks.