Remote Cloud Security Engineer - AWS, Kubernetes, SOC2

Arbitrum; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first global workforce

NY office access

Professional reimbursement

Medical, dental & vision coverage

401k retirement plan + company match

Wellness stipend

Home office setup program

Job summary

Offchain Labs is seeking a Security Engineer to define and improve our cloud security posture across the Arbitrum stack. You will collaborate with engineering, infrastructure and product teams to ensure automated, compliant, and resilient systems that scale with our growing Ethereum ecosystem.

The role requires 5+ years in security engineering, strong AWS and Kubernetes experience, and the ability to translate complex risk concepts into clear recommendations.

Qualifications

• 5+ years in a security engineering role.
• Expertise in cloud security architecture and CI/CD pipelines.
• Experience with threat modelling and security testing.
• Familiarity with SOC2, ISO 27001, NIST CSF.
• Ability to translate complex security concepts into clear risk-based recommendations.
• Strong written and verbal communication skills.

Responsibilities

• Design, implement, and improve secure cloud-native architectures and CI/CD pipelines.
• Identify risks and harden systems across the technology stack.
• Automate security controls and educate developers.
• Contribute to information security governance, policies, standards, procedures, awareness.
• Collaborate with engineering, infrastructure, and product teams to align controls with business objectives.

Skills

Security engineering

Cloud infrastructure (AWS)

Kubernetes

Threat modelling

Security design reviews

Security testing

Regulatory frameworks (SOC2, ISO 27001

Tools

AWS

Kubernetes

Vault

KMS

Job description

Offchain Labs is seeking a Security Engineer to define and improve our cloud security posture across the Arbitrum stack. You will collaborate with engineering, infrastructure and product teams to ensure automated, compliant, and resilient systems that scale with our growing Ethereum ecosystem.

The role requires 5+ years in security engineering, strong AWS and Kubernetes experience, and the ability to translate complex risk concepts into clear recommendations.