Senior Cloud Security Engineer — AWS Native Security & CSPM

Jobtailor; Menlo Park (CA); On-site; USD 185,000 - 240,000; Full time

Job summary

Grail is seeking a senior cloud security leader to drive the design, implementation, and ongoing improvement of secure AWS architectures across the product lifecycle. You will partner with Platform and Cloud Engineering to implement IAM, KMS, GuardDuty, Security Hub, and other native services for proactive threat detection and risk management.

You will develop standards, guardrails, and governance across AWS accounts, containers, and hybrid workloads, and automate monitoring, compliance, and

Qualifications

• 8+ years in product security, cybersecurity, cloud security, or related roles.
• Hands-on security threat modeling, risk assessments, and vulnerability management for complex software.
• Experience embedding security into CI/CD and DevSecOps practices.
• Experience supporting security incident response and root-cause analysis in production.
• Bachelor’s degree or equivalent practical experience in a cybersecurity/CS-related field.

Responsibilities

• Lead design, implementation, and improvement of cloud security architectures across AWS environments.
• Partner with Platform and Cloud Engineering teams to design and manage AWS-native security services.
• Develop and enforce cloud security standards, guardrails, and governance across AWS accounts, containers, Kubernetes, serverless, and hybrid workloads.
• Automate security monitoring, compliance validation, vulnerability management, and incident response workflows using IaC and scripting.
• Conduct cloud threat modeling, architecture risk assessments, and security reviews for AWS-hosted apps, APIs, and infra.
• Mentor engineers on AWS security best practices and DevSecOps methodologies.

Skills

Cloud security architecture

Threat modeling

Vulnerability management

DevSecOps

Automation

Education

Bachelor’s degree in Cybersecurity, CS, or related field

Tools

AWS

IAM

KMS

GuardDuty

Security Hub

Inspector

Macie

WAF

Shield

CloudTrail

CloudWatch

Job description

Grail is seeking a senior cloud security leader to drive the design, implementation, and ongoing improvement of secure AWS architectures across the product lifecycle. You will partner with Platform and Cloud Engineering to implement IAM, KMS, GuardDuty, Security Hub, and other native services for proactive threat detection and risk management.

You will develop standards, guardrails, and governance across AWS accounts, containers, and hybrid workloads, and automate monitoring, compliance, and