Hex
Cloud Security Engineer
Remote - US. Posted 9 months ago
The role
You will ensure the security and resilience of cloud infrastructure. You will provide leadership in cloud security practices and collaborate with infrastructure and engineering teams to secure cloud-native applications.
What you will do
- Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters.
- Build, deploy, and maintain infrastructure-as-code using Terraform.
- Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
- Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
- Monitor and respond to cloud security incidents.
- Provide expertise in compliance requirements related to cloud security.
- Mentor engineers and advocate for cloud security across the organization.
Required qualifications
- 5+ years of experience in cloud security engineering, with extensive expertise in AWS.
- Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
- Expert-level knowledge and hands-on experience with Terraform.
- Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
- Familiarity with CNAPP solutions such as Wiz
- Familiarity with SIEM solutions such as Panther
- Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
- Excellent problem-solving, communication, and leadership skills.
Nice to have
- AWS Certified Security – Specialty
- Certified Kubernetes Security Specialist (CKS)
- Terraform Associate certification
- security certifications from SANS or OffSec
Benefits
- market-benched salary & equity
- comprehensive health benefits
- flexible paid time off
About the company
Hex is a team of builders on a mission to make everyone a data person. Their platform empowers users to explore data using natural language on trusted context.