Cloud Security Engineer II: AppSec & Threat Modeling

Leith of Wendell; United States; In loco; USD 120.000 - 160.000; Tempo pieno

Descrizione del lavoro

Holman is seeking a Security Engineer where cloud infrastructure and software development meet. You will design security architecture for Azure and AWS, maintain security tooling, and collaborate with development teams to threat model applications and remediate vulnerabilities.

You will also review third-party vendor security, support AI security initiatives, and participate in incident response as part of the security team. Strong emphasis on IaC and secure SDLC practices.

Competenze

• 5-7 years in information security and engineering, with cloud/security focus.
• Strong experience securing Azure and AWS in cloud-native and hybrid setups.
• Hands-on with Terraform/Terragrunt/ARM/Bicep.
• Ability to read code in .NET, Python, Ruby, or Node.js to explain vulnerabilities and fixes.
• Knowledge of OWASP Top 10 and threat modeling methodologies (STRIDE).
• Experience with Entra ID and AWS IAM, least-privilege RBAC.

Mansioni

• Review cloud security solutions and contribute to secure architecture designs for Azure and AWS.
• Build, deploy, and maintain security infrastructure as code (Terraform, Terragrunt, ARM, Bicep).
• Perform third-party vendor security reviews and document findings with mitigations.
• Conduct threat modeling with development teams and support remediation.
• Support security of AI platforms and governance, including prompts and data handling.
• Participate in incident response and share security best practices.

Conoscenze

Cloud security

Application security

Threat modeling

Terraform

ARM/Bicep

Azure

AWS

OWASP Top 10

OAuth2/OpenID

Code review

Strumenti

Wiz

Prisma Cloud

Descrizione del lavoro

Holman is seeking a Security Engineer where cloud infrastructure and software development meet. You will design security architecture for Azure and AWS, maintain security tooling, and collaborate with development teams to threat model applications and remediate vulnerabilities.

You will also review third-party vendor security, support AI security initiatives, and participate in incident response as part of the security team. Strong emphasis on IaC and secure SDLC practices.