Security Engineer II: Cloud & App Security

Holman; United States; On-site; USD 105,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Vision insurance

Dental insurance

Life and disability insurance

401(k) plan with Company Match

Job summary

Holman is seeking a Security Engineer to design security architecture for cloud environments and to threat model applications. You will maintain security tooling, support CI/CD integration, and work with development teams to remediate vulnerabilities.

The role includes participation in incident response and AI security initiatives. The ideal candidate has 5–7 years in information security or engineering with deep cloud security expertise in Azure and AWS, IaC, and strong scripting skills in

Qualifications

• 5–7 years of combined information security and technical engineering experience, with cloud or app security focus.
• Strong experience securing Microsoft Azure and AWS environments in cloud-native or hybrid setups.
• Hands-on IaC with Terraform/Terragrunt, ARM, or Bicep.
• Ability to read and explain code in .NET, Python, Ruby, or Node.js to a developer.
• Strong knowledge of OWASP Top 10, threat modeling, and secure SDLC practices.
• Experience with cloud IAM: Entra ID, AWS IAM, RBAC, least privilege.
• Familiarity with CNAPP/CSPM tooling and app security testing tools.
• Experience with Burp Suite or OWASP ZAP for manual testing.
• Experience with third-party vendor security assessments.
• Familiarity with edge/CDN platforms and security frameworks (MITRE ATT&CK, NIST, CIS).
• Scripting in Python or PowerShell; excellent communication of risk to non-technical audiences.

Responsibilities

• Review cloud security solutions and contribute to secure Azure and AWS architectures.
• Provide security guidance to Infrastructure, Cloud, and Development teams.
• Build, deploy, and maintain security infrastructure as code to keep controls versioned and repeatable.
• Perform third-party vendor security reviews and document mitigations.
• Contribute to AI security governance for enterprise platforms and data flows.
• Maintain current documentation of security controls and decisions.
• Threat-model new and existing applications with developers and drive remediation.

Skills

Cloud security

Application security

Threat modeling

OWASP Top 10

Secure software development

Python scripting

PowerShell scripting

Communication

Identity and access management

CI/CD security

Education

Bachelor's degree in Information Security, Computer Science, Information Systems, or related field

Tools

Terraform

Terragrunt

ARM

Bicep

CNAPP/CSPM

Wiz

Prisma Cloud

Orca Security

CrowdStrike Falcon Cloud Security

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Snyk

Salt Security

Traceable

APISec

42Crunch

StackHawk

Job description

Holman is seeking a Security Engineer to design security architecture for cloud environments and to threat model applications. You will maintain security tooling, support CI/CD integration, and work with development teams to remediate vulnerabilities.

The role includes participation in incident response and AI security initiatives. The ideal candidate has 5–7 years in information security or engineering with deep cloud security expertise in Azure and AWS, IaC, and strong scripting skills in