Senior Cloud Security Engineer — DevSecOps & IaC Expert

Nesto-Cloud; California (MO); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Top-tier benefits

4 weeks vacation

Hybrid work model

Telemedicine access

Job summary

nesto is seeking a Cloud Security Developer to design, implement, and maintain security for cloud infrastructure and applications. You will work across security, development, and operations to enforce robust, scalable security controls in a hybrid cloud environment.

The ideal candidate brings 5+ years in security-focused roles, deep cloud security knowledge, and hands-on experience with Kubernetes, IaC, and CI/CD pipelines. Hybrid work model offered with strong benefits.

Qualifications

• 5+ years in infrastructure or security experience.
• 5+ years development experience (Go/TS/JS).
• Strong knowledge of cloud security and Kubernetes.
• Familiarity with DAST/SAST tools (Tenable, Snyk).
• Experience with CI/CD pipelines and IaC tooling.

Responsibilities

• Implement and maintain robust security controls for cloud infra and apps.
• Identify, remediate, and validate security issues across cloud environments.
• Review designs from a security perspective and provide actionable guidance.
• Collaborate with security, compliance, and engineering teams on security strategies.
• Build and manage security tooling (WAF, IDS/IPS, Cloud products).
• Automate IaC-based provisioning and deployment (Terraform, Pulumi, Helm).
• Design processes for least-privilege access and scalable security workflows.
• Support incident detection, observability, and incident response efforts.

Skills

Cloud security

DevSecOps

Kubernetes

IAM concepts

Go/TypeScript

CI/CD pipelines

OWASP Top 10

DAST/SAST analysis

Education

Bachelor's degree in CS or related

Tools

Terraform

Pulumi

Helm

GitHub Actions

Argo CD

Azure DevOps

Tenable

Snyk

GCP Security Center

Cloud IDS

Job description

nesto is seeking a Cloud Security Developer to design, implement, and maintain security for cloud infrastructure and applications. You will work across security, development, and operations to enforce robust, scalable security controls in a hybrid cloud environment.

The ideal candidate brings 5+ years in security-focused roles, deep cloud security knowledge, and hands-on experience with Kubernetes, IaC, and CI/CD pipelines. Hybrid work model offered with strong benefits.