Senior Cloud Security Engineer

Benchmark Analytics; Chicago (IL); On-site; USD 110,000 - 140,000; Full time

Job summary

Benchmark Analytics is seeking a Senior Cloud Security Engineer to join our Infrastructure & Security team in Chicago. You will be pivotal in ensuring the reliability and security of our cloud infrastructure while enabling our engineering teams to operate securely and efficiently.

This role involves hardening our AWS environment, managing IAM strategies, and implementing effective security practices across our CI/CD pipelines. Ideal candidates will possess a deep understanding of cloud security and infrastructure as code.

Qualifications

• Experience designing and maintaining secure AWS infrastructure for both standard and GovCloud.
• Ability to manage IAM and least-privilege access controls effectively.
• Proficient in implementing security tooling and monitoring solutions.

Responsibilities

• Design, build, and maintain secure AWS infrastructure across environments.
• Own infrastructure-as-code practices with a security-first mindset.
• Implement and maintain application observability and monitoring.

Skills

AWS infrastructure expertise

Terraform / OpenTofu

IAM strategy management

Container security

Security practices in software engineering

Tools

GitHub Actions

EKS

Job description

We are dedicated to making a difference in law enforcement agencies across the U.S. Our mission is to transform policing by elevating officer performance with a preventative-based early intervention system. Driven by data science and powered by machine learning, our offering analyzes officer performance data to identify potentially problematic behavior. In partnership with the University of Chicago, we’ve developed the world’s largest multi-jurisdictional officer performance database and the only research-driven, evidence-based early intervention system available in policing today. We’re also the only provider of a fully integrated, cloud-based SaaS platform that simplifies essential policing workflows. This platform is designed to be a single-source solution for all operational needs, driving extensive efficiency gains and providing best-in-class advanced analytics and insights. Benchmark Analytics provides a comprehensive, all-in-one solution that is advancing police force management through state-of-the-art technology and market-leading data and analytics.

The Role

We’re looking for a Senior Cloud Security Engineer to join our Infrastructure & Security team, owning the intersection of platform reliability, cloud infrastructure, and security. You’ll embed security practices directly into our engineering lifecycle and apply software engineering principles to build the internal platforms that let our developers ship securely and enable AI‑assisted code development. Working closely with the Director of Infrastructure & Security, you’ll harden our AWS environment, mature our CI/CD pipelines, maintain our Kubernetes platform, and keep us audit‑ready against CJIS and SOC 2 requirements. This is a high‑ownership role spanning infrastructure, security, platform, and developer enablement, with the autonomy to make sound engineering tradeoffs, shape security decisions, and lead incident response.

Responsibilities

• Design, build, and maintain secure AWS infrastructure across standard and GovCloud environments
• Own infrastructure‑as‑code (Terraform / OpenTofu) with a security‑first mindset
• Manage IAM strategy, least‑privilege access controls, and cloud security posture
• Own application observability and monitoring — instrumentation, dashboards, and alerting across infrastructure and application layers so issues surface before customers do
• Operate and evolve our EKS‑based platform including node lifecycle, workload isolation, and cluster security
• Implement and maintain admission control, network policies, and runtime security tooling
• Partner with engineering teams on deployment patterns and container security
• Build and maintain secure, automated deployment pipelines (GitHub Actions)
• Integrate SAST, dependency scanning, secrets detection, and container image scanning into the SDLC