Senior Security Software Engineer - Cloud & Infrastructure Security

At ExtraHop, we are dedicated to safeguarding and empowering the connected enterprise. Our innovative solutions provide crucial visibility into the infrastructure that supports businesses, communities, and lives, ensuring the integrity of networks, data, and systems. Organizations trust ExtraHop to illuminate the cyber threats and vulnerabilities that traditional security and IT tools often overlook. With our insights, businesses can investigate intelligently, respond to threats quickly, and maintain operational continuity.We are driven by a strong social and moral obligation to excel at what we do, creating a secure world where everyone can flourish. If you aspire to be part of an inspiring environment where you can make a significant impact, we would love to connect with you.Position SummaryDo you have a passion for securing intricate cloud services and infrastructure? Are you eager to join a collaborative team that engineers solutions to protect some of the largest networks globally? ExtraHop is seeking a Senior Cloud Security Engineer who is adept in modern cloud system development and infrastructure-as-code practices. You will play a critical role in developing and operating product security capabilities, tools, and processes that keep us ahead in a fast-evolving security landscape, mitigate risks, and foster organizational success.We are looking for professionals with a blend of cloud security, infrastructure security, security information and event management (SIEM) technologies, DevOps, and software development experience. Candidates should thrive in a collaborative atmosphere, taking initiative to identify, remediate, and prevent security vulnerabilities and issues.You should possess hands-on experience securing cloud environments and contemporary computing infrastructures, deploying and managing SIEM tools, along with a solid understanding of Infrastructure-as-Code and container technologies.

Join Semperis, where our mission is to be a Force for Good, starting with creating an outstanding workplace. We are committed to fostering an environment where employees feel valued, supported, and empowered to excel. Our focus on purpose, growth, and balance has earned us recognition as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and multiple Inc. Best Workplace awards.We are seeking a Senior Cloud Security Engineer to enhance our dynamic team.In this pivotal role, you will be instrumental in safeguarding enterprises against cyber threats, collaborating with some of the brightest minds in cybersecurity and Identity Access Management. Your ResponsibilitiesAs we expand our cloud capabilities and regulated offerings, we are looking for a Senior Cloud Security Engineer who excels at the crossroads of cloud platforms, security engineering, networking, and automation.This position is not centered on SOC or incident-response but rather emphasizes preventative security, secure-by-default cloud architecture, and establishing scalable security foundations across our environments. Your Key ResponsibilitiesDesign, build, and maintain secure cloud foundations across Azure, AWS, and GCP, with deep expertise in at least one platform.Own and enhance Cloud Security Posture Management (CSPM) capabilities, including policies, guardrails, and automated remediation.Engineer and maintain cloud network security controls such as network segmentation, cloud-native firewalls, and secure ingress/egress configurations.Define and enforce security best practices for Kubernetes environments (AKS/EKS), including RBAC and network policies.Collaborate with engineering teams to conduct security architecture reviews and provide guidance for new services and major changes, ensuring compliance with security best practices.Engineer and maintain identity and access management solutions.

Role overview Magic School seeks a Senior Security Engineer with a focus on Application and Cloud Security. This position plays a key role in shaping how the company protects both its cloud infrastructure and software systems. The engineer will guide ongoing security improvements and help embed safeguards directly into platforms and applications. What you will do Lead projects to strengthen security across cloud environments and applications Develop and improve security frameworks to align with company objectives Perform risk assessments to find and address vulnerabilities Create and maintain incident response plans to protect systems and data Advise teams on best practices for system integrity and safety Location This position is fully remote.

Join Our Team as a Senior Cloud Security Engineer!Are you enthusiastic about creating secure and scalable cloud systems? Do you thrive on teamwork, aiming to integrate security throughout the development cycle? If you are eager to leverage your cloud security knowledge in an innovative environment that champions collaboration and continuous improvement, we want to meet you!As a Senior Cloud Security Engineer at Ridgeline, you will spearhead the security of our platform and cloud infrastructure. Collaborating with Engineering, DevOps, Product, and Compliance teams, you will implement cloud security practices, foster secure development methodologies, and establish scalable security frameworks. Your efforts will be pivotal in safeguarding our AWS environments and services, ensuring they remain secure, compliant, and efficient. You will also have the opportunity to explore and utilize cutting-edge AI tools like GitHub Copilot and ChatGPT to optimize our workflows.At Ridgeline, our approach to work is as important as the products we create. We cultivate a culture where team members act as owners, opt for growth over comfort, and communicate openly. We assume positive intent, prioritize action, and focus on solutions rather than problems. We celebrate successes, learn from challenges, and flourish in a resilient and high-performing environment. If this resonates with you, we would love to hear from you!Please note that you must be authorized to work in the United States without the need for employer sponsorship.

The Senior Cloud Security Engineer role at Aurora Innovation centers on building and maintaining resilient, automated security systems that support the company’s self-driving technology. Based in San Francisco, this position works within the Cloud Security engineering team and collaborates closely with both infrastructure and application groups. Day-to-day work covers a mix of infrastructure security, workload protection, and hardening CI/CD pipelines. The team uses a blend of open-source tools, such as OPA, Trivy, and Spire, alongside commercial products, with an emphasis on custom automation that strengthens Aurora’s security posture. Deciding when to adopt off-the-shelf solutions or develop new ones is part of the job. Key Responsibilities Secure cloud environments by: Managing IAM roles and policies Enforcing security controls Building security boundaries for resources and services Providing security guidance for Cloud and Kubernetes Create automation to address security challenges at their source Design, build, and configure security infrastructure on platforms such as AWS, Azure, or GCP Work with cross-functional teams to implement and maintain security best practices This position values hands-on problem solving, a thoughtful approach to tool selection, and a collaborative mindset. The work directly supports Aurora’s mission to deliver safe and efficient self-driving solutions.

Join the pioneering Security Team at Niantic as a Senior Cloud Security Engineer, where you will play a crucial role in enhancing the security posture of our infrastructure and production environments. Niantic Engineering is at the forefront of developing and operating a variety of successful mobile games. We are looking for innovative engineers who possess exceptional technical acumen, strong interpersonal abilities, and a passion for adopting cutting-edge technologies. Are you ready to contribute to making our internal and user-facing services more secure and robust?

About the Role Sigma Computing is seeking a Senior Security Engineer II focused on Cloud & Data Security to help safeguard our large-scale, cloud-native SaaS platform. This position centers on engineering: building security solutions, not just operating existing tools. The role calls for a subject matter expert in cloud security architecture. Collaboration with Engineering, Security, and Product teams is key, as is designing scalable controls that support business growth. Responsibilities include creating secure architectures, integrating controls into infrastructure-as-code, and setting up automated guardrails so teams can move quickly without waiting for manual security sign-offs. This is a hands-on position for someone who thrives in complex cloud environments, values automation, and knows how to scale security for a growing SaaS company. What You Will Do Architectural Leadership: Work closely with infrastructure and engineering teams to embed security into development workflows. Lead technical discussions that shape security strategy and initiatives. Multi-Cloud Engineering: Design, implement, and refine Sigma’s cloud security across AWS, GCP, and Azure, using deep architectural expertise. Threat Modeling & Incident Response: Conduct threat modeling for cloud environments and handle incident response, including investigation and remediation of malicious activity. Identity & Access Management: Develop strategies for IAM and privileged access (RBAC/ABAC, federation, least privilege, cross-account access). Remove standing privileges and long-lived credentials, and promote zero-trust and privileged access controls across IaaS and SaaS. Cloud Data Security Controls: Implement data classification, encryption/KMS, masking/tokenization, access governance, retention and deletion policies, and reduce exfiltration risks across APIs and data pipelines. Automated Remediation Workflows: Build automated responses for recurring cloud misconfigurations, drift, and policy violations to improve operational efficiency and response times. Security Stack Management: Deploy and manage cloud-native services, including CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, and container security tools. Network Defense: Evaluate and implement zero-trust network security measures. Location: New York City, NY

Illumio works to contain ransomware and breaches, helping organizations strengthen defenses and maintain operational resilience. The company’s AI Security Graph drives a breach containment platform that detects and blocks threats across hybrid multi-cloud setups. This approach aims to prevent attacks from escalating into major incidents. Illumio has been named a Leader in the Forrester Wave™ for Microsegmentation and supports businesses in adopting a Zero Trust security model to protect essential systems. Location and On-Site Requirement This Senior Cloud Security Engineer position is based at Illumio’s headquarters in Sunnyvale, California. The role requires working on-site five days per week. Engineering Culture Illumio’s engineering team values leadership, autonomy, and ownership. Team members collaborate to tackle the challenges of modern cybersecurity, working with a technology stack that covers multiple operating systems, distributed applications, and advanced UI and visualization tools. The group welcomes diverse backgrounds and perspectives, focusing on building strong products and encouraging innovation in response to global security needs. What You Will Do Develop containerized microservices for a distributed, multi-tenant system that processes data and real-time events, as well as network telemetry from several public clouds. These services give customers insights, visibility, and security recommendations to help reduce cloud risks. Design service architectures, present and defend technical concepts to peers, and deliver reliable implementations. Mentor junior engineers, new graduates, and interns to help them grow and integrate into the team. Write code primarily in Go and work with data pipelines using SQL or similar interfaces. The infrastructure platform is built on Kubernetes. Applicants with different programming backgrounds who are eager to learn are encouraged to apply. Take ownership of key features and subsystems, managing the full software development lifecycle from clarifying requirements through deployment and user adoption.

SECURITY CLEARANCE: TS/SCI with both Polygraphs is requiredPOSITION: Senior Cloud Security EngineerLCAT: Application Engineer, Level 4REQUISITION: NIN-AE4-18.062325OVERVIEW:Join our dedicated 'Security in the Cloud' team, focused on strengthening the security framework of our cloud environments. This team is tasked with formulating and upholding AWS service-specific guidelines for managing Sensitive Data (SD) and Ultra-Sensitive Data (USD), ensuring adherence to necessary handling protocols and requirements. The perfect candidate will have a robust background in security engineering, familiarity with security frameworks, and cloud security methodologies, while actively contributing to process enhancements and risk mitigation strategies.JOB DESCRIPTION:• Develop and document AWS service-specific guidelines for managing Sensitive Data (SD) and Ultra-Sensitive Data (USD), including handling protocols and read-in procedures.• Review and interpret Risk Management Framework (RMF) guidelines pertinent to both on-premises and cloud environments.• Analyze current on-premises security processes and adapt them into cloud security best practices aligned with RMF standards.• Provide strategic recommendations to governmental stakeholders regarding the migration of solutions from on-premises to cloud environments, ensuring compliance with security policies and frameworks.• Collaborate with interdisciplinary teams to implement security controls and guarantee secure cloud deployments.• Assist in the execution of security assessments, audits, and continuous improvement initiatives for cloud environments.• Stay updated on the latest cloud security standards, AWS service developments, and relevant certifications.

At SpyCloud, we are dedicated to creating a safer internet by targeting the criminal underground. Our innovative solutions successfully thwart cyberattacks and safeguard over 4 billion accounts globally. In the rapidly evolving realm of cybersecurity, being at the forefront of the fight against cybercrime makes SpyCloud a remarkable place to build your career. If you are passionate about contributing to a meaningful mission, your search ends here!In our organization, security transcends risk reduction; it is about fostering innovation. Our engineering-driven security team crafts seamless, scalable solutions that enable our teams to operate with confidence.As a Senior Cloud Security Engineer, you will play a crucial role in establishing robust security frameworks that protect SpyCloud’s cloud environments and internet-facing services. If you are eager to confront intricate security challenges, innovate cloud defense strategies, and drive security enhancements, we want to hear from you!

We are seeking a skilled Cloud Security Engineer to join our dynamic team at usm2. In this role, you will be responsible for safeguarding our cloud infrastructure and ensuring compliance with security policies and standards. You will work closely with cross-functional teams to design and implement secure cloud solutions, conduct risk assessments, and respond to security incidents.

Join Ramp as a Cloud Security Engineer and be part of a dynamic team dedicated to safeguarding our cloud infrastructure. In this role, you will leverage your expertise to design, implement, and maintain robust security measures that protect our clients' data and ensure compliance with industry standards.

About the Role Hex Technologies is seeking a skilled Cloud Security Engineer to enhance our security team. In this pivotal role, you will be responsible for safeguarding our cloud infrastructure and ensuring its resilience. You will lead cloud security initiatives and work closely with infrastructure and engineering teams to protect our cloud-native applications. Key Responsibilities: Design, implement, and oversee security solutions and controls for AWS environments and Kubernetes clusters, ensuring effective isolation and sandboxing for Hex’s RCE-as-a-Service platform. Develop, deploy, and maintain infrastructure-as-code utilizing Terraform, while upholding stringent security standards. Perform comprehensive security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments. Collaborate with development and operations teams to integrate security best practices into CI/CD pipelines. Monitor and respond to cloud security incidents, identify root causes, and propose remediation measures. Provide in-depth expertise on compliance requirements related to cloud security, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. Mentor fellow engineers and advocate for cloud security initiatives throughout the organization. Qualifications: 5+ years of experience in cloud security engineering, particularly with AWS. Proven expertise in Kubernetes security, including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management. Expertise in Terraform with hands-on experience. Familiarity with AWS security services such as IAM, GuardDuty, Security Hub, CloudTrail, and WAF. Knowledge of CNAPP solutions like Wiz and SIEM solutions such as Panther. Strong understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies. Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable. Additional security certifications from SANS or OffSec are a plus. Exceptional problem-solving, communication, and leadership skills.

Join our dynamic team at Alarm.com as a Cloud Security Engineer, where you will play a crucial role in safeguarding our cloud environments across AWS, GCP, and Azure. This position focuses on identifying and mitigating security risks using cutting-edge cloud-native security tools and managing comprehensive security solutions. You will collaborate with multiple teams to integrate security throughout the software development lifecycle while maintaining robust threat models. Additionally, you'll ensure compliance with security regulations and assist in formulating risk mitigation strategies, responding to security inquiries from clients and partners. Familiarity with cloud security platforms such as CNAPP, CSPM, CWPP, CASB, CIEM, and the Wiz tool will be advantageous in this role.Key Responsibilities:Demonstrate experience or familiarity with cloud security or engineering in major public cloud providers (AWS, GCP, Azure).Assist in evaluating, implementing, and deploying cloud-native security tools in AWS and Azure.Support monitoring, configuring rules, and enforcement using cloud security platforms like CNAPP, CSPM, CWPP, CASB, and CIEM.Utilize the Wiz tool for cloud security posture management, including configuration analysis and compliance monitoring.Contribute to the selection and enhancement of security solutions to elevate overall enterprise security.Collaborate with the Engineering team to determine and maintain our security posture.Manage deployment, integration, and configuration of security solutions, ensuring all documentation is up to date.Work closely with development, operations, and security teams to embed security in every phase of the software development lifecycle.Assist in creating and maintaining threat models for cloud environments and train engineering teams in risk-driven design principles.Partner with infrastructure, application, and other stakeholders to minimize security and privacy risks in deployed solutions.Recommend actions to management for ensuring compliance with security regulations in decision-making processes.Provide insights to mitigate risks associated with IT and information management.Assist in crafting responses to security questionnaires from clients and partners.Other duties as assigned.

Join our innovative team as a Cloud Security Engineer at Workwave, where you will play a critical role in protecting our cloud infrastructure and data. You will be responsible for implementing security measures, conducting risk assessments, and collaborating with cross-functional teams to ensure compliance with security standards.Your expertise in cloud security will help us maintain the integrity and confidentiality of our systems, while also enabling us to scale securely. If you are passionate about cloud technologies and security, we want to hear from you!

Join Ro, a pioneering direct-to-patient healthcare company, dedicated to empowering patients in achieving their health goals through seamless and effective care. We uniquely provide nationwide telehealth, lab, and pharmacy services, all through our vertically integrated platform that ensures a convenient, end-to-end healthcare experience—from initial diagnosis to medication delivery and ongoing care. Since our inception in 2017, Ro has positively impacted millions of patients, covering every county in the United States and reaching 98% of primary care deserts.Recognized as a Fortune Best Workplace in New York and Health Care for four consecutive years (2021-2024), Ro was also honored as the Best Workplace for Parents for three years in a row in 2023, and featured in the CNBC Disruptor 50 list in 2022.The Cloud Security team at Ro is committed to safeguarding the security and privacy of our patients by continuously enhancing security measures across our cloud environments. We collaborate closely with engineers and leaders across Ro’s platform, data, and product teams to develop, implement, and communicate a comprehensive security approach. In this role, you will play a pivotal part in strategic initiatives, providing engineering expertise to help make informed, scalable, secure, and privacy-respecting decisions, all while embracing a hands-on builder mindset to integrate security into our processes.This senior-level individual contributor position requires you to act as a hands-on technical expert, developing internal products and infrastructure to bolster Ro’s cloud security posture and fulfill compliance objectives. As a vital member of the Product Security team, which encompasses expertise in product security, cloud security, architecture, and privacy engineering, you will design and automate scalable architectures and tools. You will advocate for secure cloud security decisions, lead discussions and designs, and work closely with Ro’s infrastructure and engineering teams to create secure infrastructure solutions.Your exceptional communication skills and collaborative spirit will be essential to your success in this role.

At Datavant, we are revolutionizing the way health data is shared and utilized to enhance healthcare outcomes. Our mission is to secure, make accessible, and actionable the world's health data. We provide essential data solutions to various stakeholders in the healthcare ecosystem, including providers, health plans, researchers, and life sciences companies. From processing individual patient requests for medical records to driving the AI revolution in healthcare, our team is at the forefront of connecting data to improve health.By joining Datavant, you will become part of a dynamic and collaborative team dedicated to making transformative changes in healthcare.What We’re Looking ForWe are on the lookout for a Senior Cloud Security Engineer to design and implement Datavant’s enterprise Edge Defense strategy as part of our Secure Product & Infrastructure program.This role will be responsible for establishing a long-term WAAP architecture, standardizing protection patterns across various verticals, and ensuring scalable, automated security for all internet-facing workloads.You will work at a systems level and act as a senior security partner to Engineering teams—shaping architectural decisions, influencing the product roadmap, and ensuring edge protection evolves alongside our business growth.We seek a seasoned engineer who can drive program-level outcomes, transcending mere implementation of controls.What You Will DoDefine and advance the enterprise Edge Defense architecture across cloud-native, CDN-layer, and hybrid environments.Lead the cross-vertical implementation of standardized WAAP patterns, replacing fragmented or manual processes with automated, enforceable models.Oversee vendor evaluation, integration, and lifecycle governance for WAAP technologies.Establish infrastructure-as-code and policy-as-code frameworks that position secure edge protection as the default choice for Engineering teams.Collaborate closely with Platform and Product Engineering to design systems that mitigate downstream security risks.Define and monitor program-level KPIs for edge protection, focusing on coverage, enforcement maturity, drift reduction, onboarding speed, and detection quality.Mentor and elevate the skills of other security engineers in edge and cloud security domains.

About UsBased in the vibrant heart of New York City, Take-Two Interactive Software, Inc. stands as a premier innovator in the development, publishing, and marketing of interactive entertainment for consumers worldwide. Our portfolio includes industry giants like Rockstar Games, 2K, and Zynga, delivering exceptional gaming experiences across console, PC, and mobile platforms through various channels, including retail, digital downloads, and cloud streaming. Our stock is publicly traded on NASDAQ under the symbol TTWO.At Take-Two, we foster a friendly and inclusive atmosphere, promoting creativity, innovation, and efficiency, alongside opportunities for individual and team growth. Our dynamic industry offers countless chances to learn and enhance your skills in a fast-paced environment. While we are dedicated to our work, we also believe in enjoying what we do, making it an excellent place to pursue your passions.Your RoleAs a Cloud Security Engineer, you will play a crucial role in ensuring the security and integrity of our AAA game content development across various divisions. You will analyze and implement robust Cloud Security Systems throughout the Take-Two technology stack. Collaborate with IT Infrastructure, Security Engineering, and Operations teams to automate the discovery and inventory of cloud assets, ensuring optimal visibility and continuous updates to our asset registry. Work closely with Architecture to explore and implement new solutions that enhance our Cloud Security and Security Operations Center (SOC) applications while developing new tools to meet business needs. You will review cloud security change requests both internally and across our domain subsidiaries to ensure secure connectivity with customer clouds, and regularly engage with Security colleagues in label teams to prioritize and address their security needs.

Cleo is on the lookout for an experienced Lead Cloud Security Engineer to architect, deploy, and enhance security measures across our cloud infrastructure and SaaS platforms.This pivotal role will focus on fortifying Cleo's AWS security framework, embedding proactive security measures, and collaborating with our Platform and Engineering teams to minimize infrastructure vulnerabilities while fostering innovation.The successful candidate will possess practical expertise in AWS and have a proven track record in establishing robust cloud security frameworks within a rapidly expanding SaaS context.