Remote Cloud Security Engineer — AWS, Kubernetes, SOC2

cyber; Northern (KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote-first global workforce

Annual company offsite

Professional reimbursement program

Medical, dental & vision coverage (US)

401k retirement plan + company match

Wellness stipend

Home office setup program

Job summary

Offchain is seeking a Security Engineer to define and improve cloud security posture, collaborating across teams to ensure regulatory compliance and secure operations. You will design secure cloud-native architectures and CI/CD pipelines, and drive proactive risk management.

With 5+ years in security engineering, you will work on infrastructure security, threat modelling, and security testing, while educating developers on best practices and governance.

Qualifications

• 5+ years of experience in a security engineering role.
• Mastery of cloud infrastructure, particularly AWS.
• Experience focusing on infrastructure security and Kubernetes.
• Familiarity with secret management tools like Vault or KMS.
• Strong understanding of core information security concepts and major regulatory frameworks/standards (SOC2, ISO 27001, NIST CSF).

Responsibilities

• Define and improve cloud security posture across teams.
• Design secure cloud-native architectures and CI/CD pipelines.
• Identify risks and harden systems across the tech stack.
• Automate security controls and educate developers.
• Contribute to information security governance and programs.

Skills

Cloud security

AWS

Kubernetes

Security design

Threat modelling

Communication

Tools

Vault

KMS

Job description

Offchain is seeking a Security Engineer to define and improve cloud security posture, collaborating across teams to ensure regulatory compliance and secure operations. You will design secure cloud-native architectures and CI/CD pipelines, and drive proactive risk management.

With 5+ years in security engineering, you will work on infrastructure security, threat modelling, and security testing, while educating developers on best practices and governance.