📋 Description

• Own Cloud Security Posture Management (CSPM) across GCP and AWS, continuously assessing
• Design and enforce Identity and Access Management (IAM) policies, service account hygiene
• Implement cloud network security controls, including private service access, firewall rules
• Identify externally exposed services and lead efforts to move unnecessary public endpoints to
• Establish strong secrets management practices using GCP Secret Manager and AWS Secrets Manager
• Lead cloud and Kubernetes security incident response, including triage, containment, investigation

🎯 Requirements

• Bring 7+ years of experience in DevSecOps, cloud security, infrastructure security engineering, or
• Demonstrate deep hands-on experience securing production Kubernetes clusters, including RBAC
• Possess strong practical experience with GCP and/or AWS security services, including cloud IAM
• Demonstrate strong knowledge of CI/CD security, including pipeline hardening, secrets management
• Have proven experience internalizing service endpoints and reducing the attack surface of cloud
• Bring experience working with security and compliance requirements such as HIPAA, SOC 2, or ISO

🎁 Benefits

• Opportunity to work across modern multi-cloud environments spanning GCP and AWS.
• Hands-on exposure to Kubernetes, GitLab CI/CD, Terraform, Istio, Datadog, cloud security platforms
• Opportunity to own security initiatives across cloud infrastructure, containerized workloads
• Exposure to compliance programs involving SOC 2, HIPAA, and ISO 27001.
• Opportunity to build scalable security automation and policy-as-code solutions.
• Collaboration with engineering and technology teams on high-impact security initiatives.