Remote Cloud Security Engineer — IaC & Offensive Testing

Ondo Finance; United States; On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Token rights / equity

Medical insurance

Dental & vision

Flexible PTO

Remote-first team

Job summary

Ondo Finance is hiring a Senior Security Engineer to own and improve cloud, network, and infrastructure-as-code security. You will set the security baseline for production, enforce policy-as-code, and drive least-privilege access across cloud platforms.

The role sits between platform engineering and security, collaborating with SecOps and Product Security. You will write and review Terraform, break things in staging to prove policies hold, and mentor engineers on threat modeling and

Qualifications

• 3–5+ years in security engineering with a cloud/infrastructure focus.
• Strong IaC skills with experience writing/reviewing real IaC at scale.
• Production experience across AWS, GCP, or Azure.
• Hands-on scripting in Python or Go.
• Knowledge of Kubernetes security (RBAC, admission control, workload identity).

Responsibilities

• Own cloud security posture across AWS and GCP/Azure.
• Design and enforce IaC guardrails and policy-as-code.
• Lead identity and access design with least privilege.
• Manage secrets and credential lifecycle.
• Conduct offensive testing of cloud infrastructure and translate findings into controls.
• Collaborate with SecOps on detection coverage and with product security on infra threat models.
• Drive third-party/supply-chain risk for infra components.
• Lead incident response for infra-rooted incidents.

Skills

Cloud security

IaC security

AWS/GCP/Azure

Python/Go scripting

Kubernetes security

End-to-end domain ownership

Tools

Terraform

Job description

Ondo Finance is hiring a Senior Security Engineer to own and improve cloud, network, and infrastructure-as-code security. You will set the security baseline for production, enforce policy-as-code, and drive least-privilege access across cloud platforms.

The role sits between platform engineering and security, collaborating with SecOps and Product Security. You will write and review Terraform, break things in staging to prove policies hold, and mentor engineers on threat modeling and