Senior Cloud Security Engineer

Covenant HR; Boston (MA); Hybrid; USD 160,000 - 240,000; Full time

Job summary

Covenant HR is recruiting a Senior Cloud Security Engineer for a global quantitative investment firm in Boston. This hybrid role requires 2-3 days in the office with flexibility for the right candidate.

You will design, implement, and operate cloud security controls, build guardrails and automation, and lead security initiatives across SDLC, containers, Kubernetes, and AWS services. The role demands hands-on security engineering, Terraform IaC, and the ability to communicate security concepts to

Qualifications

• Strong cybersecurity engineering background with cloud security experience.
• Hands-on security engineering with guardrails, tooling, automation, and practical security solutions.
• Experience with AWS security services (IAM, KMS, GuardDuty, Security Hub, SCPs, Macie, Inspector) and Terraform.

Responsibilities

• Design, implement, operate, and improve cloud cybersecurity controls and automation in a DevSecOps environment.
• Build practical cloud security guardrails, tooling, integrations, and automated security solutions.
• Develop security automation leveraging cloud-native services and APIs.
• Provide hands-on technical leadership while remaining involved in engineering and implementation.
• Participate in deep cloud architecture discussions to ensure appropriate security controls, visibility, and risk mitigation.
• Help secure cloud infrastructure across containers, Kubernetes, EKS/ECS, networking, and CI/CD pipelines.
• Contribute to SDLC security, EDR, runtime detection, vulnerability management, and cross-functional collaboration.

Skills

Cloud security

Security automation

AWS security services

Terraform (IaC)

Tools

Terraform

Job description

Company - Our client is a global quantitative investment management firm that combines rigorous research, data, and advanced technology to serve institutional investors. The organization offers a highly technical, collaborative environment where engineers build next-generation platforms and tackle complex challenges at significant scale.

Job Title - Senior Cloud Security Engineer

Location - Hybrid in Boston, MA; ideally 2-3 days per week in office, with flexibility for the right candidate

Role Type - Direct Hire

Must Have Skills:

• Strong cybersecurity engineering background, ideally with cloud security experience
• Genuinely hands-on security engineering experience building security guardrails, tooling, automation, and practical security solutions
• Strong cloud experience; AWS preferred, including hands-on experience with native security controls and services such as IAM, KMS, GuardDuty, Security Hub, SCPs, Macie, Inspector, and VPC endpoint policies
• Infrastructure as Code, scripting, or software engineering capabilities; Terraform and scripting experience are relevant, while hands-on software development experience is a major plus

Responsibilities and Job Details:

• Design, implement, operate, and continuously improve cloud cybersecurity controls and automation within a DevSecOps environment
• Build practical cloud security guardrails, tooling, integrations, and automated security solutions
• Develop security automation and integrations leveraging cloud-native services and APIs
• Provide hands‑on technical leadership while remaining actively involved in engineering and implementation
• Participate in deep cloud architecture discussions to ensure appropriate security controls, visibility, and risk mitigation
• Help secure cloud infrastructure across areas including containers, Kubernetes, EKS/ECS, networking, and application delivery pipelines
• Contribute to security initiatives involving SDLC security, EDR, runtime detection and prevention, and vulnerability management
• Partner cross‑functionally with network, systems, cloud, and project engineering teams as well as technical and functional leadership
• Translate technical security direction into scalable, functional solutions
• Influence technical direction and effectively communicate security considerations to both technical and non‑technical stakeholders
• Participate in the CSIRT team rotation
• Operate as a self‑motivated, hands‑on security engineer with a strong builder mindset