Senior Cloud Security Engineer – Posture & Detection

Xometry; North Bethesda (MD); Hybrid; USD 180,000 - 200,000; Full time

Benefits offered by this job

401(k) match

Medical, dental and vision insurance

Life and disability insurance

Generous paid time off

Job summary

Xometry is seeking a Staff Cloud Security Engineer to own cloud security posture, runtime detection, and alerting across a modern, cloud-native stack. You will lead CrowdStrike configuration, work with MDR, and drive secure, scalable AWS deployments.

The role emphasizes proactive threat detection, policy development, and automation using Python and IaC tools, with a focus on risk posture and continuous improvement.

Qualifications

• 8+ years in cloud security or related infrastructure security
• Experience with CSPM platforms (CrowdStrike, Wiz, Prisma Cloud, Orca)
• Strong AWS security architecture knowledge (IAM, VPC, CloudTrail)
• IaC tooling (Terraform, OpenTofu, CloudFormation) and security enforcement
• Automation of security posture checks and detection workflows using Python/shell

Responsibilities

• Own CrowdStrike Falcon configuration and alerting
• Define alert routing, triage thresholds, escalation logic with MDR
• Monitor AWS for posture drift and misconfigurations
• Secure Kubernetes clusters and runtime detection
• Develop and enforce AWS security policies for scalable deployments
• Evaluate and lead new detection tooling and cloud SIEM implementations
• Manage IaC security in Terraform or OpenTofu
• Automate detection workflows via Python/shell
• Stay updated on cloud threats and translate to coverage

Skills

Cloud security

Python

Shell scripting

Terraform/OpenTofu/CloudFormation

AWS

Kubernetes security

Security detection

US citizenship or LPR

Education

Bachelor's degree in CS/InfoSec or related

Tools

CrowdStrike Falcon

MDR partnership

Job description

Xometry is seeking a Staff Cloud Security Engineer to own cloud security posture, runtime detection, and alerting across a modern, cloud-native stack. You will lead CrowdStrike configuration, work with MDR, and drive secure, scalable AWS deployments.

The role emphasizes proactive threat detection, policy development, and automation using Python and IaC tools, with a focus on risk posture and continuous improvement.