Cloud Security Engineer: LA Hybrid, AI-Driven Defenses

Renesas Electronics; Los Angeles (CA); Hybrid; USD 150,000 - 160,000; Full time

Benefits offered by this job

Bonus opportunities

Job summary

Renesas Electronics is seeking a Cloud Security Engineer in Los Angeles to own the security layer of our modern stack, including cloud posture, detection, and enforcement across GovCloud and commercial AWS environments. This role reports into the CISO organization and collaborates with platform engineering, product, and compliance to accelerate security as a competitive advantage.

You will design secure-by-default guardrails, lead threat hunting, and manage centralized logging, SIEM, and

Qualifications

• 5+ years of hands-on experience in security engineering, cloud security, or DevSecOps with production ownership of security controls and infrastructure.
• Bachelor's degree in Computer Science or related field (or equivalent practical experience)
• Deep AWS security expertise—IAM, KMS, VPC/network security, GuardDuty, Security Hub, CloudTrail, Config, WAF—including hands-on experience across commercial and GovCloud environments
• Demonstrated experience in threat detection and threat hunting across cloud, application, and identity telemetry, including detection engineering / detection-as-code
• Experience operationalizing threat intelligence to drive proactive defense
• Strong background in logging, monitoring, and security reporting—centralized logging, SIEM design and administration, alerting, dashboards, and metrics
• Experience implementing and administering security infrastructure and tooling (CSPM, vulnerability management, secrets management, workload/endpoint protection)
• Application and pipeline security experience—securing CI/CD (GitHub Actions), SAST/DAST/SCA integration, secrets management, and securing containerized/Kubernetes workloads
• Infrastructure-as-code proficiency with Terraform and containerization tools such as Docker, applied to security guardrails and controls
• An innovative, adversarial mindset—you anticipate how systems break and automate the defense before it's needed
• Strong systems thinking and the ability to design scalable, secure, maintainable controls
• Excellent written and verbal communication skills
• Comfort operating in autonomous, fast-paced environments
• Nice to Have: Certifications and related experience

Responsibilities

• Design and operate the security posture of Duro's AWS commercial and GovCloud environments—IAM and least-privilege access models, KMS/encryption policy, VPC segmentation, network controls, and secure-by-default guardrails across accounts and tenants.
• Threat Detection & Hunting: Proactively hunt across cloud, application, and identity telemetry for anomalous and adversarial behavior; build detections as code and reduce false positives.
• Threat Intelligence: Operationalize threat intel—integrate feeds, contextualize indicators against attack surface, drive proactive hardening.
• Logging, Monitoring & Reporting: Architect centralized logging, SIEM, and security monitoring; own alerting pipelines, dashboards, and leadership-facing metrics.
• Security Infrastructure Implementation & Administration: Implement and improve CSPM, vulnerability management, secrets management, workload/endpoint protection, and cloud-native security services.
• Application & Pipeline Security: Secure CI/CD pipelines (GitHub Actions), integrate SAST/DAST/SCA, enforce secrets hygiene, and secure container/Kubernetes workloads.
• Security as Code: Build reproducible, version-controlled security infrastructure and guardrails with Terraform and policy-as-code.
• Compliance-Driven Controls: Map controls to SOC 2, ITAR, GovCloud to leadership; translate framework obligations into technical enforcement.
• AI-Driven Security Engineering: Use AI-augmented workflows to accelerate detection engineering and control implementation.
• Incident Response: Support detection, investigation, containment, and post-incident hardening; feed lessons learned into automated coverage.

Skills

Security engineering

Cloud security

Threat detection

Threat hunting

Logging & monitoring

CI/CD security

Communication skills

Autonomous work

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Docker

Kubernetes

GitHub Actions

CloudTrail

GuardDuty

Security Hub

Job description

Renesas Electronics is seeking a Cloud Security Engineer in Los Angeles to own the security layer of our modern stack, including cloud posture, detection, and enforcement across GovCloud and commercial AWS environments. This role reports into the CISO organization and collaborates with platform engineering, product, and compliance to accelerate security as a competitive advantage.

You will design secure-by-default guardrails, lead threat hunting, and manage centralized logging, SIEM, and