Cloud Security Engineer: Multi-Cloud & AI Guardrails

PlayOn Sports; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision insurance

Employee equity

Open PTO policy

401K with company match

Hybrid/flexible work environment

Job summary

PlayOn is seeking a Cloud Security Engineer to secure our multi-cloud environment across GCP and AWS. You’ll own the security posture, automate guardrails in delivery pipelines, and help scale enterprise AI services like Bedrock and Gemini Enterprise.

This is a hands‑on role focused on security as code and scalable protection across traditional cloud workloads and emerging generative AI systems. This role emphasizes CI/CD integration, container security with EKS, and implementing robust

Qualifications

• Hands-on experience securing both GCP and AWS in production environments.
• Strong working knowledge of Terraform and an infrastructure-as-code mindset.
• Proficiency with GitHub-based workflows and integrating security into CI/CD pipelines.
• Experience with cloud security posture management tooling such as CrowdStrike CSPM and Prowler.
• Practical experience securing Kubernetes, ideally Amazon EKS.
• Solid grasp of cloud IAM, networking, encryption, and logging fundamentals.
• Scripting ability in Python, Go, or a similar language for automation.
• Hands-on experience with SIEM platforms for log aggregation, detection, and security monitoring.

Responsibilities

• Design, implement, and maintain security controls across GCP and AWS, including IAM, network segmentation, encryption, logging, and key management.
• Operate and tune CrowdStrike Falcon Cloud Security (CSPM) to continuously monitor cloud posture, triage misconfigurations, and drive remediation across accounts and projects.
• Run and extend Prowler assessments to benchmark environments against CIS, NIST, and internal standards, integrating findings into automated reporting and ticketing workflows.
• Build and maintain security infrastructure as code using Terraform, ensuring controls are versioned, peer-reviewed, and consistently applied across environments.
• Embed security into CI/CD pipelines through GitHub (Actions, branch protection, secret scanning, dependency review) so issues are caught before they reach production.
• Secure containerized workloads running on Amazon EKS, covering cluster hardening, RBAC, network policies, image scanning, and runtime protection.
• Define and enforce security guardrails for enterprise AI adoption, including data governance, access controls, prompt/output safeguards, and monitoring for Amazon Bedrock and Google Gemini Enterprise.
• Develop and design agentic security detection and response capabilities, with a focus on scaling existing processes leveraging AI.
• Investigate and respond to cloud security incidents, perform root‑cause analysis, and lead improvements that prevent recurrence.
• Develop automation and tooling to reduce manual effort, improve detection coverage, and provide clear, actionable metrics to leadership.

Skills

GCP Security

AWS Security

Terraform

GitHub Actions

CrowdStrike CSPM

Prowler

Kubernetes / EKS

Python/Go scripting

SIEM

Tools

CrowdStrike CSPM

Prowler

GitHub Actions

Amazon EKS

Terraform

Job description

PlayOn is seeking a Cloud Security Engineer to secure our multi-cloud environment across GCP and AWS. You’ll own the security posture, automate guardrails in delivery pipelines, and help scale enterprise AI services like Bedrock and Gemini Enterprise.

This is a hands‑on role focused on security as code and scalable protection across traditional cloud workloads and emerging generative AI systems. This role emphasizes CI/CD integration, container security with EKS, and implementing robust