Senior Cloud Security Engineer - AWS & DevSecOps

Covenant HR; Boston (MA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Full benefits provided

Relocation assistance

Job summary

Covenant HR is partnering with a well-established investment management firm in Boston, seeking a Senior Cloud Security Engineer. Hybrid role: 2–3 days in the office, with flexibility for the right candidate.

You will lead cloud security strategy in a DevSecOps environment, focusing on automation, guardrails, and AWS security services. You will collaborate with network, systems, cloud engineering, and AWS teams, contribute to Kubernetes security (EKS/ECS), and support security across the SDLC,

Qualifications

• Strong background in security with cloud security focus.
• Hands-on in building guardrails, tooling and automation.
• Extensive AWS security expertise (IAM, KMS, GuardDuty, Security Hub, SCPs, Macie, Inspector, VPC).
• Experience with Infrastructure as Code (Terraform) and scripting.
• Security is among top two strengths across security, cloud, and IaC.

Responsibilities

• Develop and implement cloud security strategy in DevSecOps.
• Design and operate cloud security controls, guardrails, tooling, and automation.
• Build AWS integrations and security automation to strengthen posture.
• Collaborate with network, systems, cloud engineering, and AWS.
• Participate in deep technical cloud architecture and security discussions.
• Work across container and Kubernetes security (EKS/ECS).
• Support security across pipelines and the SDLC.
• Contribute to EDR, runtime detection and prevention, and vulnerability management.
• Address cloud networking security requirements and controls.
• Participate in a CSIRT rotation.
• Hands-on security engineer focused on capabilities, not DevOps shipping.

Skills

Cloud security

Security automation

IaC / scripting

AWS security

DevSecOps

Tools

Terraform

AWS

GuardDuty

Security Hub

Macie

KMS

IAM

EKS

ECS

Job description

Covenant HR is partnering with a well-established investment management firm in Boston, seeking a Senior Cloud Security Engineer. Hybrid role: 2–3 days in the office, with flexibility for the right candidate.

You will lead cloud security strategy in a DevSecOps environment, focusing on automation, guardrails, and AWS security services. You will collaborate with network, systems, cloud engineering, and AWS teams, contribute to Kubernetes security (EKS/ECS), and support security across the SDLC,