Security Engineer I, Application Security

TalentHop; United States; On-site; USD 200,000 - 265,000; Full time

Benefits offered by this job

Flexible paid time off

Job summary

TalentHop is representing a Cloud Security Engineer role focused on securing the organization's cloud infrastructure in AWS and Kubernetes. You will design and implement security controls, embed security into CI/CD pipelines, and mentor teams on cloud security best practices.

The position emphasizes threat modeling, incident response, and adherence to standards such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS while delivering secure, scalable cloud-native applications.

Qualifications

• 5+ years of cloud security engineering experience in AWS/Kubernetes environments.
• Strong CI/CD security and DevSecOps practices.
• Experience with threat modeling, audits, and incident response.
• Familiarity with SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS.
• Excellent leadership and communication skills.

Responsibilities

• Design, implement, and secure AWS and Kubernetes infrastructure.
• Develop infrastructure-as-code with Terraform and secure defaults.
• Lead security assessments, threat modeling, and audits.
• Integrate security into CI/CD pipelines with DevSecOps.
• Respond to incidents and mentor teams on cloud security.

Skills

Cloud security engineering

AWS security

Kubernetes security

CI/CD security

DevSecOps leadership

Education

AWS Certified Security – Specialty

CKS (Certified Kubernetes Security Specialist)

Terraform Associate

SANS/OffSec certifications

Tools

Terraform

Wiz

Panther

GuardDuty

Security Hub

CloudTrail

WAF

Job description

The organization operates in the cloud software and application development space, providing a web-based notebook and app authoring platform. It addresses challenges around securely managing cloud infrastructure and cloud-native applications, particularly by integrating security within complex cloud environments involving AWS and Kubernetes. The company emphasizes embedding security practices throughout development and operations to maintain resilience and compliance across various regulatory standards. Its platform’s architecture includes modern web technologies and infrastructure-as-code, deployed via tools like Terraform, Helm, and AWS, supporting the management of databases and application kernels at scale.

2. About the Opportunity:

The Cloud Security Engineer will lead the efforts to secure and maintain the resilience of the company’s cloud infrastructure. This role is responsible for designing and implementing security controls in AWS and Kubernetes environments, embedding security in CI/CD pipelines, and responding to cloud security incidents. The position is critical to ensuring the security posture of cloud-native applications and infrastructure, supporting compliance with industry standards, and mentoring teams on cloud security best practices.

3. Responsibilities:

• Design, implement, and manage security solutions for AWS and Kubernetes environments, including sandboxing for remote code execution platforms
• Develop and maintain infrastructure-as-code using Terraform with robust security standards
• Conduct security assessments, threat modeling, and audits of cloud infrastructure and Kubernetes deployments
• Collaborate with development and operations teams to integrate security into CI/CD pipelines
• Monitor and respond to cloud security incidents, performing root cause analysis and recommending remediation
• Provide expertise on cloud security compliance standards such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS
• Mentor engineers and promote cloud security awareness across the organization

4. Requirements:

• Minimum 5 years of experience in cloud security engineering with strong AWS expertise
• Proficiency in Kubernetes security, including cluster hardening, RBAC, network policies, and container vulnerability management
• Expert-level hands-on experience with Terraform
• Familiarity with AWS security services such as IAM, GuardDuty, Security Hub, CloudTrail, and WAF
• Experience with CNAPP solutions like Wiz and SIEM tools such as Panther
• Strong understanding of secure software development lifecycle, CI/CD security, and DevSecOps practices
• Relevant certifications preferred: AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), Terraform Associate
• Additional security certifications from SANS or OffSec considered a plus
• Strong problem-solving, communication, and leadership skills

5. Pay Range and Compensation Package:

• The salary range for this role is: $200,000 - $265,000
• Placement in the salary range will be decided after the interview process, considering factors such as skills, experience, internal fairness, and growth potential
• Competitive total rewards package including market-benchmarked salary and equity
• Flexible paid time off

Equal Opportunity Statement:

Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.