Remote Senior Cloud Security Engineer

Remote; San Francisco (CA); Remote; USD 140,000 - 190,000; Full time

Job summary

Redox is seeking a Senior Security Engineer to own cloud-native and application security across the platform. This hands-on IC role focuses on hardening, code reviews, and translating control gaps into engineering proposals that drive production impact.

You will partner with Engineering, embedding security into the SDLC through container security, Kubernetes hardening, and architecture reviews, following established standards to make secure paths the easy path for engineers.

Qualifications

• 5+ years in security engineering with a track record of hands-on delivery across system hardening, security engineering projects, and peer mentorship.
• Strong technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening protocols.
• Experience with threat modeling for applications built using Node.js, TypeScript, Python or Go.
• Hands-on experience supporting secure SDLC practices and CI/CD safeguards using GitHub Actions, ensuring artifact validity and pipeline integrity.
• Direct experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager, Vault, or similar platforms.
• Solid experience across the vulnerability management lifecycle, from initial triage to production remediation.
• Ability to apply compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls that align with engineering workflows.
• Strong written communication skills, with the ability to clearly document decisions and collaborate effectively within a remote, asynchronous organizational culture.
• Proficiency in AI tools and techniques, including prompt engineering and hands-on experience across multiple large language model platforms, with a demonstrated ability to automate workflows using AI.

Responsibilities

• Own Cloud Security Posture Management including Kubernetes and Container security practices, admission control, network policies, image integrity, and environment hardening.
• Manage comprehensive vulnerability lifecycles, prioritizing remediation based on actual production exposure rather than simplistic finding metrics.
• Collaborate with Platform Engineering to support secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity.
• Convert HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls.
• Evaluate and secure infrastructure-as-code across all environments.
• Execute incident response duties, encompassing forensic investigation and the facilitation of blameless post‑mortem analyses.
• Contribute to security standards within Engineering through design reviews, collaborative pairing, and mentorship of peers.
• Support bug bounty triage and maintain professional engagement with external security researchers.

Skills

Kubernetes security

Cloud security

Threat modeling

Secure SDLC

Incident response

GitHub Actions

Automation & scripting

Communication in English

Tools

GitHub Actions

Terraform

Kyverno

Karpenter

KEDA

Velero

ArgoCD

Atlantis

Job description

Redox is seeking a Senior Security Engineer to own cloud-native and application security across the platform. This hands-on IC role focuses on hardening, code reviews, and translating control gaps into engineering proposals that drive production impact.

You will partner with Engineering, embedding security into the SDLC through container security, Kubernetes hardening, and architecture reviews, following established standards to make secure paths the easy path for engineers.