> Markdown version of [/jobs/ext/2253381-cloud-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2253381-cloud-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud & Application Security Engineer - **Company:** THE MADISON - **Location:** Burbank, CA, United States - **Experience:** Experienced - **Salary:** $130,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, User Authentication, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Continuous Integration, DevOps, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Open Web Application Security, Windows PowerShell, Systems Development Life Cycle, Software Tools, Cloud Services, Secure Coding, Web Application Security, Software Vulnerability Management, Web Applications, Data Logging, Google Cloud, Delivery Pipeline, Software Security, GWAPT, AI Platforms, Kubernetes, Restful APIs, Terraform, Static Application Security Testing, Golang, Dynamic Application Security Testing - **Published:** August 26, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/27964609/Cloud-Application-Security-Engineer-California-Burbank-7416 ## About the Role * 4-6 years of related experience . * Bachelor's degree, or equivalent combination of education and experience . * Experience securing enterprise cloud environments across AWS, Azure, and/or GCP, including Kubernetes. * Strong understanding of cloud architecture, IAM, networking, cloud security controls, and Infrastructure-as-Code. * Experience integrating security into CI/CD pipelines using Terraform and modern DevOps platforms. * Proficiency in Python, PowerShell, Bash, Go, or a similar language, or demonstrated ability to leverage AI-assisted engineering tools to develop automation and security solutions. * Hands-on experience with Wiz or a comparable CSPM/CNAPP platform. * Experience with application security, including secure SDLC, threat modeling, secure code reviews, SAST, DAST, SCA, secret scanning, vulnerability management, remediation, and web application security testing. * Strong understanding of web application security, REST APIs, authentication (OAuth/OIDC/JWT), and OWASP Top 10. * Familiarity with AI security concepts and securing enterprise AI platforms or AI-assisted applications. * Security certifications (e.g., CISSP, CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer, AZ-500, CSSLP, or GWAPT) are a plus. ## Description The Cloud & Application Security Engineer will design, implement, validate, and operate security controls across our cloud infrastructure, applications, and software delivery pipelines. This role will partner with DevOps, various Engineering, and Security teams to build secure-by-default platforms that enable developers while reducing organizational risk. This is a hands-on role requiring strong experience in cloud security architecture, application security testing, CI/CD pipeline hardening, and infrastructure-as-code security. What will you do? * Design, implement, and mature secure cloud architectures across AWS, Azure, and GCP, with a primary focus on GCP. * Develop, audit, and harden cloud infrastructure, including IAM, networking, organization policies, logging, and Terraform-based Infrastructure-as-Code. * Provide security architecture reviews and guidance for cloud applications, APIs, infrastructure, DevOps, and AI-assisted development. * Perform application security assessments, secure code reviews, and hands-on testing of web applications, APIs, and cloud services using automated and manual techniques to identify vulnerabilities and drive remediation. * Identify , prioritize, and remediate cloud and application vulnerabilities, including critical and zero-day threats. * Lead evaluations, proof-of-concepts, and implementation of cloud and application security technologies. * Secure AI platforms and AI-assisted development by implementing appropriate security controls and reviewing AI-assisted applications for security risks. * Partner with Security Operations to improve cloud detection, monitoring, incident response, and security visibility. * Provide exceptional experiences for our guests, partners, and team members, including by adhering to our appearance and presentation guidelines while on-site. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)