Senior Cloud Security Engineer - AWS, Kubernetes & CI/CD

Indico Data; Boston (MA); Remote; USD 150,000 - 190,000; Full time

Job summary

Indico Data is seeking a Senior Cybersecurity Engineer to lead hands-on security across AWS, Kubernetes, CI/CD, and incident response. You will partner with the CISO and CTO to translate priorities into practical controls, reviews, and processes, influencing secure design and development practices while balancing startup velocity.

You will own threat modeling, vulnerability management, and security monitoring, contributing to incident response and guardrails that reduce risk without slowing

Qualifications

• 6+ years of security experience in SaaS or startup environments.
• Hands-on AWS security experience including IAM, networking, logging, monitoring, encryption.
• Experience securing Kubernetes, containers, CI/CD pipelines, IaC, and modern cloud deployment patterns.
• Strong IAM and least privilege understanding.
• Knowledge of application/product security including authentication, authorization, secure coding, and secure design review.
• Experience defining or operating vulnerability management, secrets management, secure development, access control, or incident response processes.
• Experience with secrets management, cloud key management, encryption design, data residency, threat modeling, or secure SDLC programs.
• Experience with security monitoring, alert triage, incident response coordination, and remediation tracking.
• Scripting with Python, Go, Bash for security automation.
• Ability to review infrastructure, application, and operational changes for material security risk.
• Ability to partner with Engineering and Platform while maintaining independence and oversight.
• Strong written and verbal communication; provide guidance, runbooks, and customer-facing documentation.
• Good risk prioritization and startup tradeoffs.

Responsibilities

• Improve Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response.
• Partner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes.
• Review Engineering work against security standards, with authority to request changes where needed.
• Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments.
• Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns.
• Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access.
• Define and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control.
• Provide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review.
• Improve detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection.
• Own day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements.
• Coordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership.
• Maintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy.
• Create practical security guidance, standards, procedures, and runbooks for security-sensitive work such as production access, secrets handling, vulnerability remediation, incident response, customer data handling, and secure engineering.
• Maintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support.
• Evaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work.
• Build or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable.

Skills

AWS security

Kubernetes security

CI/CD security

Product security

Incident response

IAM

Networking

Secrets management

Threat modeling

Python

Go

Automation

Tools

CloudTrail

GuardDuty

SIEM

CrowdStrike

GitHub Actions

Terraform

ArgoCD

Job description

Indico Data is seeking a Senior Cybersecurity Engineer to lead hands-on security across AWS, Kubernetes, CI/CD, and incident response. You will partner with the CISO and CTO to translate priorities into practical controls, reviews, and processes, influencing secure design and development practices while balancing startup velocity.

You will own threat modeling, vulnerability management, and security monitoring, contributing to incident response and guardrails that reduce risk without slowing