Cloud Security Engineer

I’m working with a well-funded, YC-backed Series B AI startup that’s looking to hire a Cloud Security Engineer as they continue to scale their product and enterprise customer base.

They’re looking for someone who’s strong across AWS infrastructure and hands-on security — someone who understands how production cloud environments are built, but has also been responsible for finding vulnerabilities, hardening systems, and improving security across the application and infrastructure.

What you’ll work on:

• Own security across a production AWS environment
• Identify and remediate infrastructure, container, dependency, and application vulnerabilities
• Harden cloud infrastructure, APIs, and production services
• Improve IAM, access controls, secrets management, and network security
• Build and improve vulnerability scanning, monitoring, and threat detection
• Work across Docker/container security and infrastructure-as-code
• Partner directly with engineering leadership on security architecture and best practices
• Help strengthen the company’s security posture as they scale with larger enterprise customers

What they’re looking for:

• Strong hands-on experience with AWS / Amazon Web Services
• Experience securing cloud infrastructure in a production environment
• Experience with vulnerability detection and remediation
• Strong understanding of areas like IAM, WAF, GuardDuty, Security Hub, container security, API security, OWASP, SAST/DAST, CVEs, and dependency scanning
• Experience with Docker and infrastructure-as-code such as Terraform or CloudFormation
• Comfortable working across both infrastructure and application security
• Startup experience is a plus, particularly if you’ve owned security in a smaller engineering team

This is a hands-on engineering role rather than a compliance-focused security position. They’re looking for someone who can actually get into the infrastructure and codebase, identify where the risks are, and help fix them.