Senior Cloud Security Engineer: Policy-Driven Security

Qventus; United States; On-site; USD 166,000 - 185,000; Full time

Benefits offered by this job

Open Paid Time Off

paid parental leave

professional development

wellness and technology stipends

a generous employee referral bonus

employee stock option awards

Job summary

Qventus is seeking a Security Engineer to own the design and buildout of cloud and data security tooling, driving security policy and collaborating with internal teams to strengthen the organization’s posture.

You will implement policy-as-code, automate guardrails, and secure container workloads on Kubernetes, leveraging CNAPP/CSPM tools like Orca, Wiz, or Upwind, with DSPM/CIEM/SSPM as optional strengths.

Qualifications

• Demonstrated ability to drive complex, ambiguous projects across teams and communicate tradeoffs clearly.
• Foundational cloud security knowledge: threat models, IAM, networking, encryption, access controls, phishing, misconfig risks.
• Experience with CNAPP/CSPM tools such as Orca, Wiz, or Upwind; DSPM, CIEM, or SSPM is a plus.
• Comfort with automation and scripting (Python/Go/Bash) and policy-as-code.
• Experience integrating policy-as-code into CI/CD/Kubernetes (OPA) workflows.
• Familiarity securing containerized workloads on Kubernetes and HIPAA data handling.

Responsibilities

• Own the design, buildout, and priorities of Qventus' cloud and data security engineering.
• Collaborate with teams to automate security guardrails, not gates.
• Know where sensitive data lives and develop controls for secure access validation.
• Partner with engineering teams so security is understood and owned, not imposed.

Skills

Cross-team collaboration

Cloud security fundamentals

CNAPP tools

Policy as code

CI/CD

Kubernetes security

HIPAA data handling

Tools

Orca

Wiz

Upwind

DSPM

CIEM

SSPM

Job description

Qventus is seeking a Security Engineer to own the design and buildout of cloud and data security tooling, driving security policy and collaborating with internal teams to strengthen the organization’s posture.

You will implement policy-as-code, automate guardrails, and secure container workloads on Kubernetes, leveraging CNAPP/CSPM tools like Orca, Wiz, or Upwind, with DSPM/CIEM/SSPM as optional strengths.