Senior Security Specialist - Cloud Red Team(Global Security)

Jobgether; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Bonuses

Stock options

Training budget

Flexible work arrangements

Career progression

Job summary

Jobgether is seeking a Cloud Security Engineer to assess and improve public cloud security across AWS, Azure, and GCP. You will run hands-on Red and Purple Team exercises, develop offensive security tooling, and automate security operations to strengthen detection and response capabilities.

You will collaborate with Cloud Security, Cloud Operations, Threat Hunting, and SOC teams to deliver meaningful security improvements and ensure secure, reliable cloud-hosted services.

Qualifications

• Hands-on security experience in public cloud environments.
• Experience with cloud-native security controls and tooling.
• Ability to automate security testing and remediation.

Responsibilities

• Assess security posture across AWS, Azure, and GCP.
• Execute Red Team and Purple Team exercises in production.
• Develop offensive security tooling and automation.
• Automate cloud security operations via APIs and scripts.
• Collaborate with Cloud Security, Cloud Ops, SOC, and RI teams.
• Analyze vulnerabilities and provide actionable recommendations.
• Communicate findings to technical and non-technical stakeholders.
• Support cloud infrastructure security across architectures and pipelines.
• Promote continuous security improvements across teams.

Skills

Cloud platform expertise

Cloud architecture

DevOps practices

Scripting & automation

Infra as code tools

Kubernetes security

Security monitoring

Threat analysis

Communication skills

Education

Cloud certifications (AWS/Azure/GCP)

Tools

Terraform

CloudFormation

Ansible

Puppet

Jenkins

Job description

Accountabilities:

- Assess public cloud security: Evaluate and improve the security posture of cloud environments across AWS, Microsoft Azure, and Google Cloud Platform, identifying weaknesses and recommending practical remediation strategies.

- Execute Red Team and Purple Team exercises: Participate in hands‑on security assessments within mature production environments, simulating attack techniques and working with defensive teams to strengthen detection and response capabilities.

- Develop offensive security capabilities: Contribute to the development, refinement, and maintenance of offensive security tooling, automation, and tradecraft to improve testing effectiveness.

- Automate cloud security operations: Use cloud APIs, command‑line interfaces, and scripting to support security testing, automate operational tasks, and assess cloud configurations.

- Collaborate with security and operations teams: Partner with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, Security Operations Center, Incident Response, and machine learning and AI analytics teams to deliver meaningful security improvements.

- Analyze vulnerabilities and attack paths: Investigate complex security events, identify potential exploitation paths, assess operational risks, and provide clear, actionable recommendations.

- Communicate security findings: Explain technical vulnerabilities, attack scenarios, incidents, and emerging trends to cloud operations teams, internal customers, security professionals, business stakeholders, and management.

- Support cloud infrastructure security: Assess architectures, configurations, deployment pipelines, networking, patching, high availability, and other controls that influence the security and reliability of cloud‑hosted services.

- Promote continuous security improvement: Work collaboratively with technical and defensive teams to improve security practices, strengthen organizational resilience, and evolve assessment methodologies.

Requirements:

- Cloud platform expertise: Strong hands‑on experience managing and building systems or platforms on at least one major public cloud provider: AWS, Microsoft Azure, or Google Cloud Platform.

- Cloud architecture and DevOps: Good understanding of modern cloud‑centric architectures, DevOps principles, and the operational practices required to maintain secure and reliable cloud environments.

- Scripting and automation: Experience automating operational activities using cloud APIs, command‑line interfaces, and scripting tools.

- Infrastructure as code and orchestration: Intermediate experience with configuration management and orchestration tools such as Ansible or Puppet, infrastructure‑as‑code platforms such as Terraform or CloudFormation, and CI/CD tools such as Jenkins.

- Cloud service operations: Understanding of PaaS and SaaS environments, including service‑level agreements, load balancing, high availability, operating system patching, networking, and security management.

- Operating systems and technical foundations: Strong technical understanding of Linux and Windows environments, along with relevant hardware and software platforms.

- Security communication: Ability to explain complex technical concepts, vulnerabilities, and attack paths in clear, accessible language for both technical and non‑technical audiences.

- Cybersecurity experience: Experience in cybersecurity is an advantage, particularly three or more years of experience conducting network‑layer or application‑layer penetration testing.

- Security certifications: Relevant information security or cloud certifications in AWS, Azure, or GCP are considered an asset.

- Kubernetes knowledge: Experience operating Kubernetes environments and understanding multi‑tenancy and its security implications is desirable.

- Analytical and investigative skills: Ability to assess complex security events, interpret vulnerability findings, evaluate risk, and develop effective solutions.

- Leadership and collaboration: Strong decision‑making, problem‑solving, communication, and relationship‑building skills, with the ability to collaborate across teams and influence security improvements.

- Growth‑oriented mindset: Demonstrated initiative, attention to detail, a commitment to continuous learning, and the ability to set ambitious goals and perform effectively in challenging environments.

Benefits:

- Competitive compensation: Salaried compensation with a comprehensive total rewards program, including bonuses and competitive benefits.

- Flexible benefits: Access to a flexible benefits program designed to support a range of employee needs.

- Potential additional rewards: Commissions and stock‑related compensation may be available where applicable.

- Dedicated training budget: Annual funding for professional training and industry conference attendance.

- Professional development: Access to industry‑leading public and private training opportunities to deepen cloud security and offensive security expertise.

- Leadership support: Coaching, training, and development opportunities supported by leaders invested in employee growth.

- Collaborative environment: Work alongside experienced offensive security specialists and cross‑functional cybersecurity teams in a dynamic, high‑performing environment.

- Flexible work arrangements: Hybrid and remote‑work flexibility, with options designed to support work‑life balance.

- Career progression: Opportunities to take on greater responsibilities, expand technical expertise, and advance professionally.

- Meaningful impact: Contribute to protecting critical cloud environments and strengthening cybersecurity capabilities in complex, business‑critical systems.

- Inclusive workplace culture: A commitment to collaboration, respect, diverse perspectives, and an environment where employees are supported in their professional development.