Cloud Security Engineer – IAM, Logging & Secure CI/CD

OON Systems LLC; New York (NY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

OON Systems LLC is seeking a Cybersecurity Engineer to secure cloud systems, application layers, access control, and monitoring infrastructure across the platform. You will work across infrastructure, application security, logging, secrets management, and operational hardening to improve resilience and trustworthiness of the platform over time.

Responsibilities include designing strong security controls, improving authentication and least-privilege patterns, building detection and response

Qualifications

• Experience with cloud security, infrastructure hardening, and secure engineering practices.
• Understanding of IAM, encryption, logging, monitoring, and vulnerability reduction.
• Experience with secure CI/CD and production infrastructure.
• Strong ownership and practical security judgment.
• Ability to communicate clearly across technical and operational teams.

Responsibilities

• Design and strengthen security controls across infrastructure, services, and deployment pipelines
• Improve authentication, authorization, secrets management, and least-privilege access patterns
• Build logging, detection, and alerting systems to improve visibility and response readiness
• Partner with engineering teams to reduce application and infrastructure risk
• Support security documentation, auditability, and ongoing platform hardening

Skills

Cloud security

IAM & encryption

CI/CD security

Monitoring & logging

Security ownership

Tools

SIEM

Vulnerability management

Secrets management tooling

Job description

OON Systems LLC is seeking a Cybersecurity Engineer to secure cloud systems, application layers, access control, and monitoring infrastructure across the platform. You will work across infrastructure, application security, logging, secrets management, and operational hardening to improve resilience and trustworthiness of the platform over time.

Responsibilities include designing strong security controls, improving authentication and least-privilege patterns, building detection and response