Senior Software Engineer, Cloud Security

Jobtailor; Boston (MA); On-site; USD 150,000 - 210,000; Full time

Job summary

Jobtailor seeks an experienced Cloud Security Architect to strengthen AWS environments, embed security into the SDLC, and drive tooling and guardrails across teams. You will lead least-privilege design, logging, and monitoring while guiding incident response and compliance initiatives.

Collaborating with engineering and DevOps, you will enable shift-left security, automate checks, and mentor staff in cloud security practices to reduce risk and accelerate secure delivery.

Qualifications

• 10+ years of relevant experience with a Bachelor’s degree; or 8 years and a Master’s degree; or equivalent experience.
• Strong software and cloud skills in Python, Ansible, AWS and Terraform.
• Experience with Compliance frameworks (e.g., ISO 27001).
• Experience with AWS IAM roles and policy management.
• Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI).
• Experience with container/orchestration (Docker, Kubernetes).
• Ability to address security concerns with a variety of teams including IT, Computational Scientists, Software Developers, Cloud Ops and ML engineers.

Responsibilities

• Improve the security of cloud architecture across our AWS environments.
• Embed security into the software development life cycle (SDLC).
• Implement and manage security tooling.
• Partner with engineering teams to remediate vulnerabilities and reduce risk.
• Integrate security into CI/CD pipelines and developer workflows.
• Build automated security checks, policy-as-code, and guardrails.
• Enable shift-left security practices across engineering teams.
• Design, update and enforce least-privilege access models across infrastructure and applications.
• Establish logging, monitoring, and alerting for both infrastructure and application layers.
• Lead response to cloud and application security incidents.
• Conduct root cause analysis and drive systemic improvements.
• Ensure systems meet regulatory requirements (ISO 27001).
• Define policies for secure development and cloud usage.
• Support audits and continuous compliance initiatives.
• Mentor engineers on both cloud and application security practices.

Skills

Python

Ansible

AWS

Terraform

CI/CD Tools

Docker

Kubernetes

AWS IAM Roles

Policy Management

Security Automation

Education

Bachelor’s degree

Tools

GitHub Actions

Jenkins

GitLab CI

Job description

Responsibilities

• Improve the security of cloud architecture across our AWS environments.
• Embed security into the software development life cycle (SDLC).
• Implement and manage security tooling.
• Partner with engineering teams to remediate vulnerabilities and reduce risk.
• Integrate security into CI/CD pipelines and developer workflows.
• Build automated security checks, policy-as-code, and guardrails.
• Enable “shift-left” security practices across engineering teams.
• Design, update and enforce least-privilege access models across infrastructure and applications.
• Establish logging, monitoring, and alerting for both infrastructure and application layers.
• Lead response to cloud and application security incidents.
• Conduct root cause analysis and drive systemic improvements.
• Ensure systems meet regulatory requirements (ISO 27001).
• Define policies for secure development and cloud usage.
• Support audits and continuous compliance initiatives.
• Mentor engineers on both cloud and application security practices.

Requirements

• 10+ years of relevant experience with a Bachelor’s degree; or 8 years and a Master’s degree; or equivalent experience.
• Strong software and cloud skills in Python, Ansible, AWS and Terraform.
• Experience with Compliance frameworks (e.g., ISO 27001).
• Experience with AWS IAM roles and policy management.
• Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI).
• Experience with container/orchestration (Docker, Kubernetes/EKS).
• Ability to address security concerns (drive security solutions or negotiate trade-offs) with a variety of teams including IT, Computational Scientists, Software Developers, Cloud Ops and ML engineers.

Hard Skills

• Python
• Ansible
• AWS
• Terraform
• CI/CD Tools
• Docker
• Kubernetes
• AWS IAM Roles
• Policy Management
• Security Automation

Soft Skills

• Collaboration
• Mentoring
• Negotiation