Senior Cloud Security Engineer (AWS/Kubernetes)

Mosaic.tech; San Francisco (CA); On-site; USD 200,000 - 265,000; Full time

Benefits offered by this job

Health benefits

Flexible Paid Time Off

Salary and equity

Job summary

Hex is seeking an experienced Cloud Security Engineer to join its security team in San Francisco. You will design and manage security for AWS and Kubernetes, build infrastructure-as-code with Terraform, and lead security practices across CI/CD pipelines.

The role requires hands-on expertise in cloud security, Kubernetes hardening, and Terraform, with strong collaboration to ensure compliance with SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. Excellent leadership and communication are essential.

Qualifications

• 5+ years of experience in cloud security engineering, with extensive expertise in AWS.
• Proficiency with Kubernetes security: RBAC, network policies, container vulnerability management.
• Expert-level knowledge and hands-on Terraform.
• Familiarity with AWS security services (IAM, GuardDuty, Security Hub, CloudTrail, WAF).
• Familiarity with CNAPP solutions such as Wiz.
• Familiarity with SIEM solutions such as Panther.
• Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
• Relevant certifications such as AWS Certified Security – Specialty, CK S, and Terraform Associate certification are highly desirable.
• Bonus points for security certifications from SANS or OffSec.
• Excellent problem‑solving, communication, and leadership skills.

Responsibilities

• Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters.
• Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
• Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
• Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
• Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
• Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
• Mentor engineers and advocate for cloud security across the organization.

Skills

AWS expertise

Kubernetes security

Terraform

AWS security services

CNAPP Wiz

Panther SIEM

DevSecOps

AWS Security Specialty

CKS

Terraform Associate

Leadership

Tools

Terraform

Kubernetes

AWS

Job description

Hex is seeking an experienced Cloud Security Engineer to join its security team in San Francisco. You will design and manage security for AWS and Kubernetes, build infrastructure-as-code with Terraform, and lead security practices across CI/CD pipelines.

The role requires hands-on expertise in cloud security, Kubernetes hardening, and Terraform, with strong collaboration to ensure compliance with SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. Excellent leadership and communication are essential.