Senior Cloud Security Platform Engineer AWS - Unlimited PTO

Linuxconfig; Austin, Northern (TX, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Unlimited PTO

Purpose-driven work

Modern cloud technologies

Security-focused culture

Job summary

BusPatrol seeks a Senior Cybersecurity Engineer to secure our AI-enabled safety platforms in AWS multi-account environments. You will design and enforce least-privilege access, build secure IaC modules with Terraform and CDK, and integrate security into CI/CD delivery.

You will collaborate with DevOps, SRE, and engineering teams to implement guardrails, threat-informed controls, and secure golden paths while maturing telemetry, vulnerability management, and incident response capabilities.

Qualifications

• 8–10+ years of professional experience in cloud security, platform security, or DevSecOps.
• Hands-on experience securing production AWS environments across multiple accounts.
• Strong knowledge of IAM, KMS, Secrets Manager, CloudTrail, GuardDuty, Security Hub, and VPC security.
• Experience implementing IaC security using Terraform, CDK, CloudFormation, or similar tools.
• Experience designing least-privilege access and cross-account access controls.
• Experience securing CI/CD pipelines, build runners, containers, and artifacts.

Responsibilities

• Design, implement, and continuously improve security controls across AWS multi-account environments.
• Establish least-privilege identity patterns and cross-account access controls.
• Build secure, reusable Terraform modules and AWS CDK constructs for platform services and guardrails.
• Evolve Organizations, Control Tower, and SCPs to improve governance and reduce blast radius.
• Secure cloud networking, VPNs, Direct Connect, and network segmentation strategies.
• Implement secrets-management and encryption patterns with AWS KMS, Secrets Manager, and Parameter Store.
• Integrate security checks into GitHub Actions and delivery workflows (SBOMs, scanning, signing).
• Develop policy-as-code and preventive guardrails (Config, SCPs, Guard, OPA, Conftest, Checkov).
• Collaborate to define secure golden paths and documented patterns for engineers.
• Operate cloud security telemetry and findings across GuardDuty, Security Hub, CloudWatch, Datadog.
• Triage and remediate platform security findings from CNAPP/CSPM and vulnerability tools.
• Support incident response and post-incident improvements for cloud security events.
• Produce architecture decisions, runbooks, and documentation for engineering teams.

Skills

AWS IAM & KMS

IaC security

CI/CD security

Networking security

SRE collaboration

Threat modeling

Linux & scripting

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

AWS CDK

CloudFormation

GitHub Actions

Job description

BusPatrol seeks a Senior Cybersecurity Engineer to secure our AI-enabled safety platforms in AWS multi-account environments. You will design and enforce least-privilege access, build secure IaC modules with Terraform and CDK, and integrate security into CI/CD delivery.

You will collaborate with DevOps, SRE, and engineering teams to implement guardrails, threat-informed controls, and secure golden paths while maturing telemetry, vulnerability management, and incident response capabilities.