Senior Cloud Security Engineer — Automation & Multi-Cloud

Brillio; United States; On-site; USD 140,000 - 200,000; Full time

Job summary

Brillio is seeking a Senior Cloud Security Engineer to design and implement secure-by-default cloud security controls across AWS, Azure, and GCP. You will partner with engineering to strengthen security posture while maintaining velocity.

Responsibilities include security automation, incident response support, threat modeling, and third-party risk assessments, plus collaboration with stakeholders to embed security throughout the development lifecycle.

Qualifications

• Minimum 5+ years in information security or related field, with at least 2+ years cloud security experience.
• Strong understanding of AWS (IAM, EC2, VPC, ECR, ECS, EKS) and Azure security configurations.
• Hands-on with CNAPP or similar cloud security tools and containers (Docker, Kubernetes).

Responsibilities

• Security automation: build automated tools and guardrails without slowing development velocity.
• Cloud infrastructure security: design and maintain scalable security controls for cloud environments.
• Security engineering: implement enhancements and strengthen security configurations.
• Cross-functional collaboration: partner with engineering, infra, and tech stakeholders to embed security.
• Security incident response: assist investigations and drive preventive measures.
• Third-party security assessments: evaluate third-party integrations and AI tool risks.
• Threat modeling: participate in architecture reviews to find vulnerabilities early.
• Security enablement: educate teams on best practices and risk mitigation.

Skills

Security automation

Cloud security

Threat modeling

Incident response

Cross-functional collaboration

Security posture

Tools

SAP GRC

Nessus

Archer

Metasploit

Wireshark

Burpsuite

AWS Secrets Manager

Nmap

CxSAST

Web Application Scanning

ServiceNow GRC

AppScan

Job description

Brillio is seeking a Senior Cloud Security Engineer to design and implement secure-by-default cloud security controls across AWS, Azure, and GCP. You will partner with engineering to strengthen security posture while maintaining velocity.

Responsibilities include security automation, incident response support, threat modeling, and third-party risk assessments, plus collaboration with stakeholders to embed security throughout the development lifecycle.