Senior Cloud Security Engineer - AWS & Kubernetes Guardrails

Altruist; Los Angeles (CA); Hybrid; USD 170,000 - 225,000; Full time

Benefits offered by this job

Office in Culver City & SF

Healthcare, dental & vision

401(k) matching

Parental leave 16 weeks

Career development

Perks program

Financial guidance

Work from anywhere (1 month)

Job summary

Altruist is seeking a Senior Cloud Security Engineer to secure our multi-account AWS and Kubernetes environment. You’ll build guardrails and controls that keep our cloud platform hardened as we grow. This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.

You’ll partner with our Detection & Response team on investigations for cloud-origin events and own cloud vulnerability management, IAM, KMS, networking, and CSPM tooling (Wiz).

Qualifications

• 4+ years of cloud security engineering experience.
• Hands-on with AWS IAM, org/SCPs, and KMS.
• Kubernetes/EKS security experience.
• IaC experience with Terraform and CSPM tooling (Wiz).
• Comfort with scripting in Python or Go.
• BA/BS in CS/CE/Info Security or related field.
• Tech-savvy with modern stacks (AWS, Kubernetes, Terraform, GitLab CI/CD).
• Strong ownership and accountability in work.
• Excellent communication and collaboration skills.
• Experience in regulated fintech/financial services environments and relevant certifications.

Responsibilities

• Build cloud guardrails as code.
• Own cloud vulnerability and exposure management.
• Partner with Detection & Response on investigations for cloud-origin events.

Skills

Cloud security

AWS security

Kubernetes security

Terraform

Python/Go

Communication

Ownership

Problem solving

Resilience

Fintech experience

Education

BA/BS in Computer Science or related

Tools

Wiz

GitLab CI/CD

Job description

Altruist is seeking a Senior Cloud Security Engineer to secure our multi-account AWS and Kubernetes environment. You’ll build guardrails and controls that keep our cloud platform hardened as we grow. This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.

You’ll partner with our Detection & Response team on investigations for cloud-origin events and own cloud vulnerability management, IAM, KMS, networking, and CSPM tooling (Wiz).