Senior Cloud Security Engineer

TenX Recruiting; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Our client seeks a Senior Cloud Security Engineer to own security of production and cloud environments across AWS and Azure, with a hands-on, high-ownership mindset.

You’ll drive security posture, runtime protection for Kubernetes, and secure infrastructure design in collaboration with engineering. 8+ years in security engineering and strong IaC, CSPM, and RBAC experience are required.

Qualifications

• 8+ years in security engineering with cloud focus.
• Hands-on with multi-cloud (AWS and Azure) and Kubernetes.
• Strong IaC, cloud networking, and IAM in cloud.
• Experience with CSPM and runtime security tooling.
• Ability to own cloud security independently and collaborate with engineers.

Responsibilities

• Own security posture of production and cloud infra (AWS and Azure).
• Provide runtime security for Kubernetes from deployment to detection.
• Partner with engineering on secure infra architecture and secure design of production environments.
• Lead cloud security posture management end to end: triage, prioritization, remediation.
• Define and drive cloud infrastructure security standards: baseline configurations, IaC security, key/secrets management.
• Drive fine-grained, role-based access to production in partnership with IT.
• Feed infrastructure findings into vulnerability management and risk reporting.

Skills

Cloud security

AWS

Azure

Kubernetes

Infrastructure as code

CSPM tooling

Runtime security

RBAC

Collaboration with engineers

Tools

Terraform

Job description

About the Role

Our client's security needs are growing as they operate more production and cloud infrastructure for larger and more demanding customers. They are looking for a Senior Cloud Security Engineer to own the security of that infrastructure. This is a hands-on, high-ownership role: you will own how our production and cloud environments are hardened, isolated, and monitored.

You will set and drive the direction for infrastructure and production security, reporting to the Head of Security, and partnering closely with the wider engineering organization.

In your first year, success looks like hardened and well-segmented production environments, strong runtime security coverage across our container footprint, and a clear, defensible story for how we secure the infrastructure our customers rely on.

What You'll Do

• Own the security posture of production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.
• Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity.
• Partner with engineering on secure infrastructure architecture and the secure design of our production environments.
• Own cloud security posture management end to end: triage, prioritization, and driving remediation with the teams that own the resources.
• Define and drive cloud infrastructure security standards: baseline configurations, infrastructure-as-code security, and key and secrets management.
• Drive fine-grained, role-based access to production, in partnership with engineering and IT.
• Feed infrastructure findings into vulnerability management and risk reporting.

What You'll Bring

• 8+ years in security engineering, with a deep focus on cloud and infrastructure security, ideally at a high-growth startup.
• Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes).
• Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments.
• Experience with CSPM and runtime security tooling, and the judgment to turn findings into prioritized, actioned work.
• The ability to own cloud infrastructure security independently, set its direction, and make sound tradeoffs across teams.
• Fluency working directly with engineers on architecture and remediation, not just producing findings.

Nice to Have

• Experience securing multi-tenant production systems or environments that run customer workloads.
• Familiarity with Upwind or similar CSPM and runtime platforms.
• Experience contributing to SOC 2 or ISO 27001 evidence from the infrastructure side.
• Background in AI or ML platforms or distributed systems.