> Markdown version of [/jobs/ext/2425163-senior-engineer-ii-cloud-security](https://www.wearedevelopers.com/jobs/ext/2425163-senior-engineer-ii-cloud-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Engineer II, Cloud Security - **Company:** Lila Sciences, Inc. - **Location:** Cambridge, MA, United States - **Experience:** Expert - **Salary:** $108,000.0 - $163,333.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, DevOps, Federated Identity Management, Infrastructure as a Service (IaaS), Identity and Access Management, Information Security Management, Python (Programming Language), Platform as a Service (PAAS), PCI Data Security Standards, Windows PowerShell, Security Information and Event Management, Software Security, Amazon Virtual Private Cloud (VPC), Cloudformation, Kubernetes, Machine Learning Operations, Terraform, Devsecops, Security Orchestration, Automation & Response - **Published:** August 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a31f45f35e9a4889 ## About the Role * Extensive hands-on experience in information security, with deep cloud and SaaS security ownership. * Strong AWS security knowledge, including IAM, SCPs, VPC/networking, KMS, CloudTrail, GuardDuty, Security Hub, and Config. * Hands-on experience with CSPM or CNAPP tooling such as Wiz or comparable platforms. * Experience operating detection and response workflows across SIEM, EDR, CSPM, or related security tooling. * Practical incident response experience, including triage, containment, recovery, and post-incident review. * Strong understanding of workload, container, and Kubernetes security. * Proficiency with scripting and automation using Python, PowerShell, Bash, or similar tools. * Experience securing infrastructure-as-code and CI/CD workflows using Terraform, CloudFormation, ARM, OPA, Sentinel, or native cloud policies. * Strong grasp of IAM, identity federation, least-privilege access, SaaS permission models, and privileged access management practices. * Ability to translate technical findings into business risk and partner cross-functionally with cloud, DevOps, AppSec, and platform teams. Bonus Points For * Deep experience securing MLOps pipelines, AI-enabled platforms, or AI Security Posture Management practices. * Experience with Azure-native security services, including Defender for Cloud. * Depth in CWPP, EDR/XDR, SOAR, or DSPM tooling. * Experience supporting SOC 2, ISO 27001, HIPAA, FedRAMP, PCI-DSS, or similar compliance programs. * Certifications such as CISSP, CCSP, AWS Security, Azure Security, GCIH, GCFA, GCDA, or OSCP. ## Description Lila is hiring a Senior Engineer II, Cloud Security to strengthen cloud and SaaS security across our infrastructure, platforms, and AI-enabled systems. This role owns hands-on security work across cloud posture management, detection and response, container and workload security, identity and privileged access, and security automation. This role sits within IT & Security and partners closely with infrastructure, platform, data, DevSecOps, and AI teams. The person in this role will turn cloud and SaaS security findings into prioritized remediation work, build guardrails that reduce risk before deployment, and improve Lila's ability to detect and respond to threats. The ideal candidate brings deep cloud security experience, strong operational judgment, and the ability to translate technical risk into clear action across engineering and security stakeholders. What You'll Be Building * Own cloud and SaaS security posture management across AWS, IaaS/PaaS, and core SaaS platforms. * Configure, operate, and tune CSPM, CNAPP, and SSPM tooling to surface and prioritize risk. * Partner with infrastructure and platform teams to drive remediation of cloud, SaaS, and workload findings. * Build and tune high-fidelity detections across SIEM, EDR, CSPM, and related security systems. * Lead incident response triage, containment, recovery, and post-incident review for cloud security events. * Strengthen cloud-native workload and container security across AWS, Kubernetes, hardened AMIs, and network controls. * Design policy-as-code and guardrails that prevent insecure deployments without slowing developer velocity. * Partner with AI, data, and platform teams to mature security controls for MLOps pipelines and AI-enabled platforms. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)