Senior Cloud Security Engineer
Long Beach, CA or SF Bay Area, CAAll locationsLong Beach, CA or SF Bay Area, CADenver, CO On-site
$145,000–$195,000 a yearJobFig found this opening at its original source and checks that it remains available.
About the role
As our Senior Cloud Security Engineer, you'll build security tooling and implement security controls that enable our engineering teams to ship safely on cloud platforms. You'll implement security controls for our multi-cloud environments, working closely with staff engineers on architecture decisions while securing production workloads across Azure and AWS. This is a hands-on role where you'll write production code daily, owning security projects within the cloud domain. You'll implement cloud security solutions and build tooling to enforce security controls. You'll solve complex security problems, taking ownership of projects from design through implementation with guidance on architecture and strategic direction. You'll be working in an AI-native environment where leveraging AI to accelerate your impact is expected.
What you'll bring
- Active security clearance or ability to obtain and maintain security clearance
- Experience securing production cloud environments at scale, with strong understanding of cloud security models, attack patterns, and defensive strategies across Azure and AWS
- Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
- Strong Terraform skills including module design and infrastructure-as-code security best practices
- Experience building security tooling or automation used by engineering teams
- Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect—you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies
- Hands-on experience with cloud security tools (CSPM, CWPP, SIEM ) and infrastructure-as-code security (Terraform, CloudFormation)
- Strong knowledge of IAM, encryption, logging/monitoring, and cloud-native security patterns
- DevSecOps mindset with experience embedding security into development and operations workflows
- Proven ability to assess risk, prioritize work, and execute complex security projects
- Track record of solving complex technical problems
- Comfortable diving into unfamiliar codebases and leveraging AI to bridge knowledge gaps