Cloud Security Engineer - Remote

Wiraa; EUA; Teletrabalho; USD 135 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive full-time salary

Discretionary bonus

Health benefits (medical, dental, and

Life and disability insurance

401(k) retirement plan

PTO and holidays

Professional development

Inclusive work environment

Resumo da oferta

SitusAMC is seeking a Senior Cloud & Infrastructure Security Engineer to design, implement, and maintain robust security controls across our cloud and infrastructure. This hands-on role partners with SRE, Platform, and DevOps teams to embed secure configurations by default and enforce least privilege.

The ideal candidate will bring extensive AWS security experience, IaC proficiency with Terraform/CloudFormation, and strong communication skills to translate risk into actionable controls.

Qualificações

• Bachelor’s degree or equivalent professional experience in a technical field.
• 8+ years in relevant industry experience, including 2+ years at AVP level or equivalent.
• At least 7+ years in cloud security engineering, application security, or related fields.
• 5+ years in cloud engineering, infrastructure security, DevSecOps, or SRE.
• Relevant security certifications such as CISSP, CEH, GIAC, ISSAP, CISM preferred.
• Hands-on experience securing AWS environments, including IAM, VPC, encryption, monitoring.
• Experience with Kubernetes, EKS, or similar container orchestration platforms.
• Proficiency with Infrastructure-as-Code tools like Terraform, CloudFormation, or similar.
• Knowledge of networking concepts, Linux infrastructure, and scripting languages such as Python, PowerShell, or Bash.
• Strong understanding of cloud security services including CloudTrail, GuardDuty, Security Hub, and others.
• Excellent communication skills with the ability to articulate security risks and solutions to technical and non-technical stakeholders.

Responsabilidades

• Design, implement, and maintain security controls across AWS cloud environments, including IAM policies, VPC configurations, encryption, and monitoring.
• Apply the principle of least privilege and enforce secure networking practices to safeguard cloud resources.
• Partner with SRE, Platform, Infrastructure, DevOps, and development teams to establish secure baselines, hardening standards, and preventative controls.
• Review infrastructure designs to identify security gaps and recommend scalable remediation strategies.
• Develop and maintain security controls through Infrastructure-as-Code using Terraform, CloudFormation, and reusable modules.
• Integrate automated security policies, vulnerability assessments, and compliance checks into CI/CD pipelines.
• Monitor cloud security telemetry, investigate incidents, and collaborate with Security Operations to develop automated detection and remediation capabilities.
• Conduct security architecture reviews and translate risk requirements into practical technical controls.
• Develop reference architectures, security patterns, and technical standards to guide secure cloud adoption.
• Communicate cloud security risks, business impact, and mitigation strategies to stakeholders effectively.
• Participate in ongoing security training, audits, and compliance activities to ensure adherence to industry standards.

Conhecimentos

Cloud security engineering

DevSecOps

SRE practices

Security strategy & leadership

Communication skills

Formação académica

Bachelor’s degree in a technical field

Equivalent professional experience

Ferramentas

Kubernetes

EKS

Terraform

CloudFormation

Python

PowerShell

Bash

IAM / VPC / encryption services

CloudTrail / GuardDuty / Security Hub

Descrição da oferta de emprego

About The Company

SitusAMC is a leading organization dedicated to transforming our clients' businesses and fostering career growth for our employees within the real estate industry. We pride ourselves on attracting passionate, innovative, and driven professionals who are committed to excellence. Our company serves a diverse range of clients by providing comprehensive solutions that leverage cutting-edge technology, industry expertise, and a collaborative approach. At SitusAMC, we believe in creating an inclusive environment where everyone can thrive, contribute, and make a meaningful impact. Our mission is to realize opportunities for all stakeholders while maintaining a focus on integrity, innovation, and customer satisfaction.

About The Company

SitusAMC is a leading organization dedicated to transforming our clients' businesses and fostering career growth for our employees within the real estate industry. We pride ourselves on attracting passionate, innovative, and driven professionals who are committed to excellence. Our company serves a diverse range of clients by providing comprehensive solutions that leverage cutting-edge technology, industry expertise, and a collaborative approach. At SitusAMC, we believe in creating an inclusive environment where everyone can thrive, contribute, and make a meaningful impact. Our mission is to realize opportunities for all stakeholders while maintaining a focus on integrity, innovation, and customer satisfaction.

About The Role

The Senior Cloud & Infrastructure Security Engineer is a vital member of our Information Security team, responsible for designing, implementing, and maintaining robust security controls across cloud and infrastructure environments. This role requires a hands-on engineering approach, working closely with Site Reliability Engineering (SRE), Platform Engineering, Infrastructure, DevOps, and application development teams. The primary goal is to embed security into cloud platforms and infrastructure from the outset, ensuring secure configurations are the default. The ideal candidate will possess a deep understanding of cloud security, infrastructure engineering, and security best practices, enabling the organization to move quickly without compromising security. This position offers an opportunity to lead security initiatives, influence cloud security architecture, and collaborate across teams to safeguard our enterprise assets.

Qualifications

• Bachelor’s degree in a technical field from an accredited college/university or equivalent professional experience
• Minimum of 8+ years of relevant industry experience, including 2+ years in an AVP level or equivalent role
• At least 7+ years of experience in cloud security engineering, application security, or related fields
• 5+ years of experience in cloud engineering, infrastructure security, DevSecOps, or SRE
• Relevant security certifications such as CISSP, CEH, GIAC, ISSAP, CISM preferred
• Hands-on experience securing AWS environments, including IAM, VPC, encryption, monitoring, and cloud-native services
• Experience with Kubernetes, EKS, or similar container orchestration platforms
• Proficiency with Infrastructure-as-Code tools like Terraform, CloudFormation, or similar
• Knowledge of networking concepts, Linux infrastructure, and scripting languages such as Python, PowerShell, or Bash
• Strong understanding of cloud security services including CloudTrail, GuardDuty, Security Hub, and others
• Excellent communication skills with the ability to articulate security risks and solutions to technical and non-technical stakeholders
• Ability to work independently and manage multiple priorities in a fast-paced environment

Responsibilities

• Design, implement, and maintain security controls across AWS cloud environments, including IAM policies, VPC configurations, encryption, and monitoring
• Apply the principle of least privilege and enforce secure networking practices to safeguard cloud resources
• Partner with SRE, Platform, Infrastructure, DevOps, and development teams to establish secure baselines, hardening standards, and preventative controls
• Review infrastructure designs to identify security gaps and recommend scalable remediation strategies
• Develop and maintain security controls through Infrastructure-as-Code using Terraform, CloudFormation, and reusable modules
• Integrate automated security policies, vulnerability assessments, and compliance checks into CI/CD pipelines
• Monitor cloud security telemetry, investigate incidents, and collaborate with Security Operations to develop automated detection and remediation capabilities
• Conduct security architecture reviews and translate risk requirements into practical technical controls
• Develop reference architectures, security patterns, and technical standards to guide secure cloud adoption
• Communicate cloud security risks, business impact, and mitigation strategies to stakeholders effectively
• Participate in ongoing security training, audits, and compliance activities to ensure adherence to industry standards

Benefits

• Competitive full-time salary range of $135,000 to $180,000, determined based on experience and qualifications
• Discretionary bonus potential based on performance and company guidelines
• Comprehensive health benefits including medical, dental, and vision insurance
• Life and disability insurance coverage
• Retirement savings plan with 401(k) options
• Paid time off (PTO) and paid holidays
• Opportunities for professional development and continuous learning
• Collaborative and inclusive work environment that values innovation and initiative

Equal Opportunity

SitusAMC is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. Qualified candidates will receive consideration without regard to race, color, religion, age, sex, national origin, disability, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. We believe diversity and inclusion are essential to our success and encourage individuals from all backgrounds to apply.