Responsibilities

Secure AWS and GCP environments through IAM, network security, encryption, logging, and access controls.
Perform application security reviews, vulnerability assessments, penetration-testing coordination, and remediation tracking.
Integrate SAST, DAST, dependency, container, and infrastructure-as-code scanning into CI/CD pipelines.
Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.
Improve threat detection, security logging, alerting, incident response, and investigation processes.
Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies.
Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.
Build scripts and tools to automate security checks, reporting, and remediation.
Investigate security incidents, perform root-cause analysis, and implement preventive measures.
Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.

Requirements

6–10 years of experience in information security, cloud security, application security, or DevSecOps.
Strong hands-on experience with AWS and/or GCP security.
Understanding of IAM, least-privilege access, secrets management, encryption, and network security.
Experience integrating security tools into CI/CD pipelines.
Familiarity with SonarQube, Snyk, Trivy, Checkov, Wiz, or equivalent tools.
Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
Experience with vulnerability management, security incident response, and risk assessment.
Scripting skills in Python, Bash, or similar languages.
Understanding of SOC 2 or ISO 27001 requirements.

Equal opportunity employer that values diversity and prohibits discrimination on protected grounds.