> Markdown version of [/jobs/ext/2537531-senior-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2537531-senior-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Security Engineer - **Company:** PRYZM CONSULTING LLC - **Location:** Charlotte, NC, United States - **Experience:** Expert - **Salary:** $77,000.0 - $80,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Programming, Computer Networks, Continuous Integration, DDoS Mitigation, DevOps, Cryptographic Protocols, Identity and Access Management, Information Security Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, PCI Data Security Standards, Peering, Ansible, Security Information and Event Management, Software Deployment, Software Engineering, Tripwire, Datadog, Scripting, Delivery Pipeline, Multi-Cloud, AWS Lambda, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Cloudformation, Containerization, Kubernetes, Information Technology, Cybercrime, CIS Benchmarks, Terraform, Prisma Cloud Platform, Devsecops, Serverless Computing, Docker, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=23fb55a5f1249b6b ## About the Role * Experience: 5+ years of dedicated hands-on experience in cloud security engineering, DevSecOps, or infrastructure security. * Multi-Cloud Security: Deep expertise securing core native cloud services, networks, and storage within [AWS / Azure / GCP]. * Container & Orchestration Security: Strong practical knowledge of securing Docker containers and Kubernetes clusters (EKS/AKS/GKE), including network policies, runtime security (e.g., Falco), and image signing. * Automation & Scripting: Proficiency in scripting/programming with Python, Bash, or Go to automate security controls, compliance checks, and incident response tasks. * IaC Security: Hands-on experience enforcing security standards in Terraform, CloudFormation, or Ansible. * Security Tooling: Experience with cloud security platforms (e.g., Wiz, Orca Security, Palo Alto Prisma Cloud, Datadog Security, AWS GuardDuty). * Networking & Encryption: Solid understanding of cloud networking security (VPC peering, Transit Gateways, WAF, DDoS protection) and cryptographic protocols (TLS, KMS, key management)., * Industry-recognized certifications such as CCSP, AWS Certified Security - Specialty, Certified Kubernetes Security Specialist (CKS), CISSP, or Azure Security Engineer Associate. * Proven track record of automating security remediation actions using serverless logic (e.g., AWS Lambda, Azure Functions). * Bachelor's degree in Computer Science, Information Security, or a related technical discipline. ## Description We are seeking an experienced Senior Cloud Security Engineer to design, harden, and defend our multi-cloud environments. In this role, you will lead the architecture and implementation of cloud security controls across network boundaries, IAM policies, workload protection, and CI/CD pipelines. You will collaborate directly with DevOps, Infrastructure, and Software Engineering teams to integrate security into the development lifecycle (DevSecOps), ensure compliance with industry frameworks, and proactively identify and mitigate cloud vulnerabilities., * Cloud Security Architecture: Design and implement security controls, landing zones, and hardening frameworks across [AWS / Azure / GCP] aligned with CIS benchmarks and NIST guidelines. * Identity & Access Management (IAM): Architect fine-grained IAM policies, enforce the principle of least privilege, manage SSO/MFA integrations, and audit privileged access across all cloud infrastructure. * DevSecOps & Pipeline Security: Embed static and dynamic security analysis (SAST/DAST), dependency scanning, and container security into automated CI/CD deployment pipelines. * Posture Management & Threat Detection: Configure and manage Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), and SIEM/SOAR integration for automated threat detection and alerting. * Infrastructure as Code (IaC) Security: Scan and validate Terraform, CloudFormation, or Kubernetes manifests using security tools (e.g., Checkov, tfsec, Trivy) prior to production deployment. * Incident Response & Threat Hunting: Serve as a technical lead for cloud security incidents, conduct root-cause analyses, perform threat hunting, and implement remediation measures. * Compliance & Auditing: Drive technical readiness for SOC 2 Type II, ISO 27001, HIPAA, or PCI-DSS audits, ensuring continuous compliance across all cloud environments. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Debugging in the Dark](https://www.wearedevelopers.com/videos/1658-debugging-in-the-dark) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Software Engineering Social Connection: Yubo’s lean approach to scaling an 80M-user infrastructure](https://www.wearedevelopers.com/videos/1583-software-engineering-social-connection-yubo-s-lean-approach-to-scaling-an-80m-user-infrastructure) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)