Security Engineer (Contract)

Storm2; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Storm2 is seeking a Security Engineer to design, secure, configure, and harden a new cloud environment for a greenfield initiative. The role focuses at least 50% on AWS security, with collaboration across security functions to establish foundational controls and production readiness.

You will work independently in a fast-paced setting, contribute to Terraform-based infrastructure, and help secure identities and endpoints as the project approaches its 2027 launch.

Qualifications

• Hands-on security engineering fundamentals.
• Experience with AWS cloud security in production.
• Experience with Terraform and Infrastructure as Code practices.
• Ability to work independently with minimal oversight.

Responsibilities

• Support the implementation, configuration, and hardening of a new AWS environment.
• Partner with security teams to establish security controls and best practices.
• Perform vulnerability management activities, including remediation and risk reduction.
• Assist with cloud security architecture, monitoring, and security operations.
• Contribute to Infrastructure as Code (Terraform) initiatives.
• Support identity and access management efforts, including Okta integrations, group management, and permissions.
• Assist with endpoint security initiatives and related tooling.
• Help identify, investigate, and remediate security risks.
• Collaborate with security and platform teams to prepare the environment for its planned 2027 launch.

Skills

Security engineering

AWS cloud security

Independent work

Troubleshooting

Fast-paced environments

Tools

Terraform

Okta

CrowdStrike

Job description

Duration: Through June 2027, with potential extension or conversion

Reporting To: Senior Manager, Platform Security

About the Opportunity

Our client is building a new subsidiary and standing up a brand-new cloud environment from the ground up. While the subsidiary will operate independently, it will remain closely aligned with the broader security organization.

To support this greenfield initiative, we are looking for a Security Engineer who can help design, secure, configure, and harden the new environment before launch. The role will be at least 50% cloud security in an AWS environment. You will work closely with security leadership and partner across multiple security functions to establish foundational security controls, address vulnerabilities, and help ensure the environment is production-ready.

This is a hands-on role suited to someone who thrives in fast-paced environments, enjoys building from scratch, and is comfortable operating independently.

What You'll Be Doing

• Support the implementation, configuration, and hardening of a new AWS environment
• Partner with multiple security teams to establish security controls and best practices
• Perform vulnerability management activities, including remediation and risk reduction
• Assist with cloud security architecture, monitoring, and security operations
• Contribute to Infrastructure as Code (Terraform) initiatives
• Support identity and access management efforts, including Okta integrations, group management, and permissions
• Assist with endpoint security initiatives and related tooling
• Help identify, investigate, and remediate newly discovered security risks
• Collaborate with security and platform teams to prepare the environment for its planned 2027 launch

Required Experience

• Strong security engineering fundamentals
• Hands-on AWS cloud security experience
• Experience securing and managing cloud infrastructure in production environments
• Working knowledge of Terraform and Infrastructure as Code practices
• Experience with vulnerability management and remediation
• Ability to work independently with minimal oversight
• Strong troubleshooting and problem-solving skills
• Experience working in fast-paced technology environments

Preferred Experience

• Python or other scripting/programming experience
• Okta or broader Identity Provider (IdP) experience
• Endpoint security experience (e.g., CrowdStrike)
• Experience working across multiple security domains rather than a single specialty
• Prior experience supporting greenfield projects or new platform implementations