Cloud Security Engineer
Aws Cloud Security
Aws Cloudformation
Cloud Platforms
Cloud Security
Cloud Security Monitoring
Cloud Security Posture
Cybersecurity Operations
Data Security
Engineer
Federal Cloud Security
Identity and Access Management
Information Security
InfoSec
Security
Security Automation
Security Compliance
Security Operations
Security Standards
Security Testing
Job Description
The Cloud Security Engineer will design, implement, and maintain security controls for AWS-based environments, with a focus on embedding security into CI/CD and operational workflows. The role also supports incident detection, investigation, and response while ensuring alignment with relevant security and compliance requirements.
Location
San Antonio, TX (onsite)
Compensation
USD 92,000 - 153,000 per year
Experience and Education
- Minimum experience: 6 years of relevant cloud security, cybersecurity, and AWS security experience
- Education: Bachelor’s degree in computer science, cybersecurity, engineering, or a related field
- Substitution: Four additional years of relevant experience may be substituted in lieu of a degree
Responsibilities
- Design, implement, and maintain security controls across AWS cloud environments
- Protect cloud workloads using best practices for identity management, monitoring, threat detection, and secure operations
- Develop secure AWS architectures using services such as IAM, KMS, CloudTrail, Config, and monitoring tools including Sentry and Datadog
- Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing
- Ensure AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2
- Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services
- Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation
- Integrate security into CI/CD pipelines and collaborate with engineering teams to enable secure build and deployment processes
Required Qualifications
- Eligibility: U.S. Citizenship or Green Card required, with ability to obtain a Public Trust clearance
- Strong knowledge of AWS services including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS
- Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement
- Hands-on collaboration experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates
- Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning
- Strong scripting or development experience with Python, Bash, or similar languages
- Proven ability to work independently and collaborate with cross-functional teams to address complex security, operational, and reliability challenges
Technologies
- AWS, IAM, KMS, CloudTrail, Config
- Sentry, Datadog
- Infrastructure as Code, Terraform, CloudFormation
- CI/CD pipelines
- GitHub Actions, AWS CodeBuild, ArgoCD, Helm
- Docker
- Python, Bash
- EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53
Clearance and Travel
- Clearance required: Ability to obtain Public Trust
- Travel required: Up to 10%
Benefits
- Medical, Rx, Dental & Vision Insurance
- Personal and Family Sick Time & Company Paid Holidays
- Parental Leave
- 401(k) Retirement Plan
- Group Term Life and Travel Assistance
- Voluntary Life and AD&D Insurance
- Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
- Transit and Parking Commuter Benefits
- Short-Term & Long-Term Disability
- Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
- Employee Referral Program
- Corporate Sponsored Events & Community Outreach
- Care.com annual membership
- Employee Assistance Program
- Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
- Position may be eligible for a discretionary variable incentive bonus
Additional Information
Job family: Software Development & Support
Nice to Have
- AWS Certified Security – Specialty (highly desirable)
- AWS Certified Solutions Architect or DevOps Engineer certifications
- CISSP, CISM or GIAC certifications
Similar Jobs
S
