Senior Cloud Platform Security Engineer

BusPatrol America LLC; Austin (TX); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Competitive salary and benefitspackage

Unlimited PTO

Mission-driven work protecting kids

Modern cloud, automation, AI, and sec.

Job summary

BusPatrol is seeking a Sr Platform Security Engineer to secure our cloud-native platform by default. You’ll own multi-account guardrails, IAM patterns, encryption, and CI/CD security controls while collaborating with DevOps, ML, and Cybershield teams.

The role emphasizes platform security engineering rather than application security. This hybrid Austin-based position focuses on building reusable security patterns, tools, and guardrails to enable rapid, secure delivery.

Qualifications

• 8–10+ years in cloud/platform security or DevSecOps.
• Hands-on in securing multi-account AWS environments.
• Strong knowledge of IAM, KMS, Secrets Manager, GuardDuty, Security Hub.
• Experience with IaC tooling (Terraform, CDK, CloudFormation).

Responsibilities

• Design and improve security controls across AWS multi-account environments.
• Establish least-privilege identity patterns and cross-account access.
• Build secure, reusable Terraform modules and CDK constructs.
• Evolve Organizations, Control Tower, SCPs, and guardrails.
• Secure cloud networking through VPCs, routing, SGs, WAF, and VPNs.
• Implement secrets-management and encryption patterns (KMS, Secrets Manager).
• Integrate security checks into GitHub Actions and delivery workflows.
• Develop policy-as-code and guardrails using OSS tools.
• Define secure golden paths and documented patterns for teams.
• Operate cloud security telemetry and findings (GuardDuty, Security Hub).
• Triage and remediate CNAPP, CSPM, and vulnerability findings.
• Support incident response and post-incident improvements.
• Produce architecture decisions, runbooks, and evidence for audits.
• Collaborate on SOC 2, ISO 27001, CIS, NIST readiness.
• Mentor engineers through reviews and security enablement.
• Contribute to secure AI-enabled engineering and data protection.

Skills

AWS platform security

IAM and identity governance

Infrastructure as Code security

CI/CD security

Vulnerability management

Security automation

Security telemetry

Incident response

Linux, networking, scripting

Cross-functional collaboration

Tools

Terraform

AWS CDK

CloudFormation

GuardDuty / Security Hub

WAF / VPC security

GitHub Actions

SCPs / policy-as-code

Job description

BusPatrol is seeking a Sr Platform Security Engineer to secure our cloud-native platform by default. You’ll own multi-account guardrails, IAM patterns, encryption, and CI/CD security controls while collaborating with DevOps, ML, and Cybershield teams.

The role emphasizes platform security engineering rather than application security. This hybrid Austin-based position focuses on building reusable security patterns, tools, and guardrails to enable rapid, secure delivery.