Senior Cloud Security Engineer

Remote in the U.S.. Posted 26 days ago

The role

You will design and build security guardrails, automation, and detection for cloud environments across AWS, GCP, and Azure. You will use a DevOps mindset to write code and ship changes through pipelines to secure infrastructure.

What you will do

Own the security posture of cloud environments across AWS, GCP, and Azure.
Design secure reference architectures and reusable patterns.
Build security into Infrastructure as Code through hardened modules and policy as code.
Secure CI/CD pipelines and the software supply chain.
Design and enforce least-privilege Identity and Access Management across clouds.
Write code and scripts to automate security controls, remediation, and evidence collection.
Operate and tune Cloud Security Posture Management and cloud-native security services.
Build logging and detection for cloud control-plane and workload activity.
Lead the cloud side of incident response.
Contribute security controls and evidence to compliance posture.

Required qualifications

Worked in a DevOps, Site Reliability Engineering (SRE), or platform engineering role.
Built and operated production infrastructure and CI/CD pipelines.
Hands-on production experience securing at least two major cloud providers (AWS, GCP, or Azure).
Deep knowledge of cloud security best practices.
Fluency in cloud security patterns including least-privilege IAM, network segmentation, encryption, secrets management, centralized logging, and preventive guardrails.
Strong coding and scripting skills in at least one general-purpose language such as Python or Go plus shell scripting.
Hands-on experience with IaC such as Terraform or OpenTofu.
Strong communication skills.

Nice to have

Familiarity with open-source cloud security tooling.
Container and Kubernetes security experience (Amazon EKS, Google Kubernetes Engine, or Azure Kubernetes Service).
A relevant cloud security certification.
Experience securing SaaS and developer platforms.
Experience supporting a SOC 2, ISO 27001, or similar program.
Hands-on cloud incident response or forensics experience.

About the company

tessera-labs is hiring a Senior Cloud Security Engineer to make their cloud environments secure by default.