Senior Cloud Security Engineer (Remote, AWS/K8s)

Offchain; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote-first global workforce + NY off

Professional reimbursement program (d3

Job summary

Offchain seeks a Security Engineer in the United States to strengthen cloud security posture and drive SOC2 alignment across teams. You will design secure cloud-native architectures, automate controls, and collaborate with engineering to align security with business goals.

The role emphasizes risk-based security, CI/CD hardening, and effective communication of complex issues to stakeholders. Remote-first with NY office options is available.

Qualifications

• 5+ years of experience in a security engineering role.
• Mastery of cloud infrastructure, particularly AWS.
• Prior experience focusing on infrastructure security and Kubernetes.
• Familiarity with secret management tools like Vault or KMS.
• Strong understanding of core information security concepts and major regulatory frameworks/standards (SOC2, ISO 27001, NIST CSF).
• Experience conducting security design reviews, threat modelling, and security testing.
• Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.

Responsibilities

• Design, implement, and improve secure cloud-native architectures and CI/CD pipelines.
• Identify risks, enforce best practices, and harden systems across the technology stack.
• Automate security controls and educate developers.
• Contribute to information security governance, policies, and compliance programs.
• Collaborate with engineering, infrastructure, and product teams to fit controls to business needs.

Skills

Cloud security

AWS

Kubernetes security

Security design reviews

Threat modelling

Communication skills

Tools

Vault

KMS

Job description

Offchain seeks a Security Engineer in the United States to strengthen cloud security posture and drive SOC2 alignment across teams. You will design secure cloud-native architectures, automate controls, and collaborate with engineering to align security with business goals.

The role emphasizes risk-based security, CI/CD hardening, and effective communication of complex issues to stakeholders. Remote-first with NY office options is available.