Senior Cloud Security Engineer

TP-Link USA Corp.; Irvine (CA); On-site; USD 170,000 - 250,000; Full time

Job summary

TP-Link Systems Inc in Irvine, CA is seeking a Senior Cloud Security Engineer to strengthen security across AWS, Azure, and Kubernetes, and to build secure dashboards and automation.

You will work with Cloud Operations, SRE, and engineering teams to drive remediation, implement guardrails, and improve security posture using APIs and IaC.

The role emphasizes practical engineering, strong cloud security judgment, and the ability to push findings to closure in a fast-paced environment.

Qualifications

• Experience securing cloud environments at scale (AWS/Azure).
• Familiarity with CSPM/CNAPP platforms and cloud security tooling.
• Ability to drive remediation end-to-end with diverse teams.

Responsibilities

• Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid infrastructure.
• Investigate vulnerabilities, misconfigurations, identity risks, exposure paths, and publicly accessible services using CSPM/CNAPP telemetry.
• Prioritize findings based on real-world risk, then drive remediation with infrastructure owners.
• Develop secure dashboards, integrations, automation, and analytical workflows using APIs and modern AI-assisted engineering tools.
• Secure Kubernetes environments and containerized workloads across the SDLC.
• Conduct security reviews of cloud architecture, identities, network controls, and deployment pipelines.
• Build automation, guardrails, reporting, and repeatable processes that improve cloud security visibility and execution.
• Investigate cloud security incidents and support response, containment, and corrective action.

Skills

Cloud security

AWS

Azure

Kubernetes

Python

APIs

Infrastructure as Code

Job description

About Us

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi‑Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

Overview

The Senior Cloud Security Engineer reduces material risk across large-scale AWS, Azure, and multi-cluster Kubernetes environments. This engineer operates and continuously improves our CSPM/CNAPP platform, investigates complex exposure paths, strengthens cloud security guardrails, and works with Cloud Operations, SRE, and engineering teams to drive remediation through closure. This is also a builder role. You will use Python, APIs, infrastructure as code, and modern AI-assisted engineering tools to develop secure dashboards, integrations, automation, and analytical workflows. Success requires strong cloud security judgment, practical engineering ability, and the persistence to drive findings through remediation rather than simply reporting them.

What You’ll Do

• Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid infrastructure.
• Use CSPM/CNAPP telemetry to investigate vulnerabilities, misconfigurations, identity risks, exposure paths, and publicly accessible services.
• Validate and prioritize findings based on real-world risk, then work with infrastructure owners to drive remediation through closure.
• Develop secure dashboards, integrations, automation, and analytical workflows using APIs and modern AI-assisted engineering tools.
• Secure Kubernetes environments and containerized workloads across the software development lifecycle.
• Conduct security reviews of cloud architecture, infrastructure patterns, identities, network controls, and deployment pipelines.
• Build automation, guardrails, reporting, and repeatable processes that improve cloud security visibility and execution.
• Investigate cloud security incidents and support response, containment, and corrective action.