Senior Cloud Security Engineer — AWS & Kubernetes

Hex; New York, San Francisco (NY, CA); Hybrid; USD 200,000 - 265,000; Full time

Benefits offered by this job

Health benefits

Equity

Flexible paid time off

Job summary

Hex is seeking an experienced Cloud Security Engineer to join our security team in New York. You will secure our cloud infrastructure across AWS and Kubernetes, implement Terraform-driven IaC, and lead security in our CI/CD pipelines.

You will drive threat modeling, security assessments, and compliance with SOC 2, ISO 27001, GDPR, and other standards, while mentoring engineers to raise Hex’s security posture across the organization.

Qualifications

• 5+ years of experience in cloud security engineering, with extensive expertise in AWS.
• Demonstrated proficiency with Kubernetes security including cluster hardening, RBAC, network policies, and container vulnerability management.
• Expert-level knowledge and hands-on experience with Terraform.
• Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
• Familiarity with CNAPP solutions such as Wiz
• Familiarity with SIEM solutions such as Panther
• Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
• Relevant certifications such as AWS Certified Security – Specialty, CKs, and Terraform Associate are highly desirable.
• Bonus points for security certifications from SANS or OffSec.
• Excellent problem-solving, communication, and leadership skills.

Responsibilities

• Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters.
• Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
• Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
• Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
• Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
• Provide expertise in compliance requirements related to cloud security (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
• Mentor engineers and advocate for cloud security across the organization.

Skills

AWS

Kubernetes security

Terraform

Cloud security

CI/CD security

RBAC

Threat modeling

Tools

Wiz

Panther

GuardDuty

Security Hub

CloudTrail

WAF

Job description

Hex is seeking an experienced Cloud Security Engineer to join our security team in New York. You will secure our cloud infrastructure across AWS and Kubernetes, implement Terraform-driven IaC, and lead security in our CI/CD pipelines.

You will drive threat modeling, security assessments, and compliance with SOC 2, ISO 27001, GDPR, and other standards, while mentoring engineers to raise Hex’s security posture across the organization.