Senior Cloud Security Engineer – Regulated Compliance

Veeam; San Jose (CA); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Unlimited PTO

Parental leave

Medical coverage

Mental health support

401(k) matching

Education resources

Job summary

Veeam is seeking a Senior Security Engineer to own security for Veeam Data Cloud (VDC) on Azure and AWS, focusing on FedRAMP boundary and broader regulated needs. You will partner with product, platform engineering, and SRE to embed secure-by-design patterns into every release.

This role requires hands-on security engineering, end-to-end ownership, and ability to work with cross-functional teams to maintain compliance across FedRAMP, STIGs, and CIS benchmarks.

Qualifications

• 8+ years in security engineering with hands-on cloud security experience.
• Experience delivering cloud products to meet regulated requirements (FedRAMP, CMMC, HIPAA, etc).
• Translate compliance controls into concrete architecture and operations.
• Strong knowledge of NIST 800-53 and continuous monitoring.
• Experience hardening infrastructure to STIGs or CIS benchmarks.
• Deep understanding of cloud security fundamentals across identity, network, encryption and remediation.

Responsibilities

• Champion secure design patterns enabling compliance across cloud environments.
• Onboard workloads into regulated environments from a security perspective.
• Harden shared infrastructure against secure baselines and document remediation.
• Lead vulnerability scanning with remediation guidance and SLA tracking.
• Review architecture changes for security input and approvals.
• Build reusable guardrails and evidence to scale controls across regimes.

Skills

Cloud security engineering

FedRAMP & regulated

NIST 800-53

Azure / AWS

Vulnerability management

Terraform

Security architecture

Cross-functional collaboration

Tools

Azure

AWS

Terraform

GitHub

Nessus

Wiz

Job description

Veeam is seeking a Senior Security Engineer to own security for Veeam Data Cloud (VDC) on Azure and AWS, focusing on FedRAMP boundary and broader regulated needs. You will partner with product, platform engineering, and SRE to embed secure-by-design patterns into every release.

This role requires hands-on security engineering, end-to-end ownership, and ability to work with cross-functional teams to maintain compliance across FedRAMP, STIGs, and CIS benchmarks.