Hybrid Cloud Security Engineer - IaC & AI-Driven

Brightspot; Reston (VA); Hybrid; USD 113,000 - 138,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

PTO

Job summary

Brightspot is seeking a hands-on Security Engineer to protect our AI-powered CMS platform and strengthen security across infrastructure and applications. You will own security initiatives, investigate incidents, and collaborate with Engineering, Platform, QA, and IT to embed security into daily workflows.

The role emphasizes cloud security, IaC integration, and proactive risk mitigation, with a strong ownership mindset and the chance to impact a SaaS-scale environment.

Qualifications

• 7+ years of hands-on security engineering experience in software development.
• Experience securing cloud environments (AWS/Azure/GCP) and modern DevOps.
• Strong knowledge of networking, secure configuration, and IaC security workflows.
• Proven ability to scope, own, and deliver security initiatives with minimal oversight.
• Experience with AI tools applied to security tasks and automation.

Responsibilities

• Lead security projects from scoping to completion with cross-team collaboration.
• Investigate incidents, respond to alerts, and contribute code for remediation.
• Identify risks, plan resolutions, and drive them to closure.
• Work with CSPM, vulnerability mgmt, and GRC tools to improve security posture.
• Enhance alerting, monitoring, and production observability for security events.
• Integrate IaC tooling (Terraform/Pulumi) into development lifecycle.
• Communicate risks clearly to technical and non-technical stakeholders.

Skills

Security engineering

Cloud security

IaC (Terraform/Pulumi)

Coding/scripting

Vulnerability management

SOC 2 Type 2 experience

AI tools in security

Cross-functional collaboration

Education

SOC 2 Type 2 certification

Tools

SIEM

GRC tooling

SAST/DAST

Job description

Brightspot is seeking a hands-on Security Engineer to protect our AI-powered CMS platform and strengthen security across infrastructure and applications. You will own security initiatives, investigate incidents, and collaborate with Engineering, Platform, QA, and IT to embed security into daily workflows.

The role emphasizes cloud security, IaC integration, and proactive risk mitigation, with a strong ownership mindset and the chance to impact a SaaS-scale environment.