Senior Cloud Security Engineer – AWS, IaC & WAF

Beyond Finance; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

PTO and holidays

401(k) match

Career development

Job summary

Beyond Finance is seeking a seasoned Cloud Security Engineer to own the security posture across AWS, drive vulnerability management, and harden CI/CD pipelines. You will implement secure IaC modules, tune WAF rules, and automate threat intel ingestion and prioritization.

The role emphasizes independent work across security tooling, incident response, and collaboration with DevOps to maintain robust security controls in our financial services environment.

Qualifications

• 5+ years hands-on security engineering in cloud security and vulnerability management.
• Strong AWS security background (IAM, networking, container orchestration, logging).
• Experience securing CI/CD pipelines and Infrastructure as Code.
• Proficiency with Terraform.
• Experience running or contributing to a vulnerability management program.
• Working knowledge of OWASP Top 10 and threat modeling.
• Ability to operate independently and drive projects.

Responsibilities

• Own cloud security posture across AWS environment using Wiz and AWS-native services.
• Establish secure defaults in Infrastructure as Code through reusable modules and policy as code.
• Harden CI/CD pipelines in partnership with DevOps.
• Run vulnerability management across cloud and application findings.
• Build automation for ingestion, deduplication, and prioritization.
• Instrument telemetry, alerting, and runbooks.
• Operate and tune WAF including managed and custom rules.

Skills

Cloud security engineering

AWS security

CI/CD security

Threat modeling

OWASP Top 10

Independent drive

Tools

Terraform

WAF management

GitHub Advanced Security

Spacelift

Job description

Beyond Finance is seeking a seasoned Cloud Security Engineer to own the security posture across AWS, drive vulnerability management, and harden CI/CD pipelines. You will implement secure IaC modules, tune WAF rules, and automate threat intel ingestion and prioritization.

The role emphasizes independent work across security tooling, incident response, and collaboration with DevOps to maintain robust security controls in our financial services environment.