Senior Cloud Security Engineer

TP-Link NA; Irvine (CA); Hybrid; USD 150,000 - 180,000; Full time

Benefits offered by this job

Fully paid medical, dental, visual

Job summary

TP-Link Systems Inc. is seeking a Senior Cloud Security Engineer to secure large-scale AWS/Azure/Kubernetes environments and advance CSPM/CNAPP platforms. You will build secure dashboards, automation, and integrations, and collaborate with Cloud Operations, SRE, and engineering teams to remediate risks.

The role emphasizes practical security engineering, cloud-first thinking, and a hands-on approach to incident response and remediation. CA-based, full-time position with competitive compensation.

Qualifications

• 7+ years in security or cloud engineering roles.
• Hands-on in production cloud environments with AWS or Azure.
• Bachelor’s degree in a technical field.
• Experience operating CSPM/CNAPP platforms and driving remediation.
• Proficient with Python, APIs, IaC, and CI/CD practices.

Responsibilities

• Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid infra.
• Investigate vulnerabilities, misconfigurations, and exposure paths using CSPM/CNAPP telemetry.
• Prioritize findings and drive remediation with infrastructure owners.
• Develop secure dashboards, integrations, automation, and workflows via APIs.
• Secure Kubernetes workloads and containerized apps across the SDLC.
• Review cloud architecture, identities, networks, and deployment pipelines.
• Build guardrails and repeatable processes to improve visibility and execution.
• Support incident investigations and remediation actions.

Skills

Cloud security engineering

AWS/Azure security

Kubernetes security

Python & APIs

CI/CD security

Policy as code

Threat investigation

Security tooling development

Cloud operations collaboration

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

Orca

Wiz

Prisma Cloud

Microsoft Defender for Cloud

Job description

About Us:

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint.

We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology.

Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

Overview:

The Senior Cloud Security Engineer reduces material risk across large-scale AWS, Azure, and multi-cluster Kubernetes environments. This engineer operates and continuously improves our CSPM/CNAPP platform, investigates complex exposure paths, strengthens cloud security guardrails, and works with Cloud Operations, SRE, and engineering teams to drive remediation through closure.

This is also a builder role. You will use Python, APIs, infrastructure as code, and modern AI-assisted engineering tools to develop secure dashboards, integrations, automation, and analytical workflows. Success requires strong cloud security judgment, practical engineering ability, and the persistence to drive findings through remediation rather than simply reporting them.

What You'll Do

• Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid infrastructure.
• Use CSPM/CNAPP telemetry to investigate vulnerabilities, misconfigurations, identity risks, exposure paths, and publicly accessible services.
• Validate and prioritize findings based on real-world risk, then work with infrastructure owners to drive remediation through closure.
• Develop secure dashboards, integrations, automation, and analytical workflows using APIs and modern AI-assisted engineering tools.
• Secure Kubernetes environments and containerized workloads across the software development lifecycle.
• Conduct security reviews of cloud architecture, infrastructure patterns, identities, network controls, and deployment pipelines.
• Build automation, guardrails, reporting, and repeatable processes that improve cloud security visibility and execution.
• Investigate cloud security incidents and support response, containment, and corrective action.

What You Must Have

• 7+ years of professional experience in security engineering, cloud engineering, infrastructure engineering, or a closely related technical role.
• 3+ years of direct, hands‑on responsibility for securing production cloud environments, with depth in AWS or Azure and practical experience with the other.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical field.
• Hands‑on experience operating an enterprise CSPM/CNAPP platform, such as Orca, Wiz, Prisma Cloud, or Microsoft Defender for Cloud, including tuning policy, investigating findings, prioritizing material risk, and driving remediation rather than simply consuming platform output.
• Experience building and shipping production-quality security tooling, automations, integrations, or dashboards using Python and APIs, supported by infrastructure as code and modern CI/CD practices. Candidates should be prepared to walk through something they built and explain their individual contribution.
• Strong command of cloud security fundamentals at scale in your primary cloud: IAM, network security, logging and detection, encryption and key management, and secure configuration.
• Hands‑on experience securing production Kubernetes environments, including workload identity, network controls, secrets management, admission policies, image security, and runtime visibility.
• Demonstrated ability to use modern AI-assisted development tools to accelerate engineering work.
• Current AWS or Azure security or architecture certification, such as AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate or Professional, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Azure Solutions Architect Expert.
• Experience working directly with Cloud Operations, SRE, or engineering teams to drive remediation of cloud security risk.

Preferred Qualifications

• Experience securing large, globally distributed or multi-cloud environments.
• Multiple cloud security or architecture certifications beyond the required minimum.
• Advanced experience implementing policy as code, automated cloud guardrails, and security controls within CI/CD pipelines.

Salary range: $150,000-$180,000

• Fully paid medical, dental, and vision insurance (partial premium coverage for dependents)
• Employer quarterly contributions to 401k funds
• 15 days accrued vacation
• 11 paid holidays
• Bi-annual reviews, and annual pay increases
• Health and wellness benefits, including free gym membership
• Quarterly team-building event

At TP-Link Systems Inc., we are continually searching for ambitious individuals who are passionate about their work. We believe that diversity fuels innovation, collaboration, and drives our entrepreneurial spirit. As a global company, we highly value diverse perspectives and are committed to cultivating an environment where all voices are heard, respected, and valued. We are dedicated to providing equal employment opportunities to all employees and applicants, and we prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Beyond compliance, we strive to create a supportive and growth-oriented workplace for everyone. If you share our passion and connection to this mission, we welcome you to apply and join us in building a vibrant and inclusive team at TP-Link Systems Inc.

Please, no third-party agency inquiries, and we are unable to offer visa sponsorships at this time.