Remote Security Engineer for AI & Cloud Platform

Cincsystems; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

CINC Systems is seeking a highly technical Security Engineer to advance application and cloud security across web apps, APIs, microservices and AI-enabled workflows. You will review architectures, perform SAST/DAST/ SCA testing, and drive secure SDLC practices while partnering with engineering teams to harden AWS environments.

You will conduct threat modeling, red team exercises, and build automation to detect, prevent and respond to security risks across CI/CD pipelines, containers, and AI

Qualifications

• Strong hands-on experience in application security, product security, AWS cloud security, offensive security or security engineering.
• Deep understanding of secure SDLC practices and embedding security into engineering workflows.
• Practical experience with SAST, DAST, SCA, manual penetration testing, code review and vulnerability validation.
• Strong knowledge of OWASP Top 10, OWASP API Security Top 10, OWASP ASVS, CWE and attack techniques.
• Experience testing web applications, APIs, microservices, cloud services, containers and distributed systems.
• Strong understanding of authentication, authorization, identity federation, OAuth, OIDC, SAML, JWT, session security and access control design.

Responsibilities

• Lead security reviews for web applications, APIs, microservices and AI-enabled products.
• Perform advanced application security testing using SAST, DAST, SCA, and manual testing.
• Identify vulnerabilities in authentication, authorization, session management and API design.
• Conduct threat modeling for new products, features, and AWS architectures.
• Develop secure SDLC processes, including code scanning and CI/CD security gates.
• Review IaC templates (Terraform, CloudFormation, AWS CDK, Kubernetes YAML) for misconfigurations.
• Assess AWS environments for IAM weaknesses, exposed services, and data exposure.
• Review AWS IAM policies and cross-account access patterns.
• Conduct red team exercises and adversary simulations.
• Develop exploit proof-of-concepts and automation to demonstrate risk.

Skills

SAST

DAST

SCA

Manual testing

AWS security

Threat modeling

Red teaming

CI/CD security

Security automation

Python

Tools

Terraform

CloudFormation

AWS CDK

Kubernetes YAML

Helm

Dockerfiles

Job description

CINC Systems is seeking a highly technical Security Engineer to advance application and cloud security across web apps, APIs, microservices and AI-enabled workflows. You will review architectures, perform SAST/DAST/ SCA testing, and drive secure SDLC practices while partnering with engineering teams to harden AWS environments.

You will conduct threat modeling, red team exercises, and build automation to detect, prevent and respond to security risks across CI/CD pipelines, containers, and AI