Cloud Security Engineer
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+1 more
Job description
Ontic is seeking a Senior Cloud Security Engineer to lead the maturation of our AWS cloud security program. This role will assess, design and automate security controls, partner closely with Engineering and DevOps teams, and build the technical foundation required for continuous compliance, FedRAMP readiness, and secure cloud operations. This is an individual contributor role focused on building scalable security capabilities-not simply operating security tools., * Design and implement cloud security controls across AWS.
- Build security automation using infrastructure as code, APIs, and scripting.
- Lead cloud security posture management and continuous improvement.
- Integrate security into CI/CD pipelines and engineering workflows.
- Develop continuous evidence collection supporting FedRAMP and other continuous compliance initiatives.
- Partner with engineering teams on secure architecture and cloud best practices.
- Improve cloud monitoring, detection, and security metrics.
- Support customer security requirements and compliance initiatives, including SOC 2, ISO 27001, and FedRAMP.
Success Criteria
- Cloud security controls are automated, repeatable and auditable.
- Continuous evidence collection reduces manual audit effort.
- Security is embedded into engineering workflows.
- AWS security posture improves through measurable automation and engineering-driven controls.
- Ontic is positioned to mature toward modern FedRAMP continuous authorization practices.
Requirements
- AWS cloud security expertise required.
- Direct FedRAMP Moderate or High experience preferred.
- Knowledge and understanding of FedRAMP CR-26 and/or 20x preferred.
- AWS Bedrock experience preferred.
- Infrastructure as code, with Terraform preferred.
- Security automation and scripting.
- CI/CD security integration.
- Cloud detection and monitoring.
- Experience supporting regulated SaaS environments and cloud compliance initiatives.
- Occasional travel to Austin TX (Ontic HQ) is required
Benefits & conditions
Competitive Salary
Medical, Vision & Dental Benefits
401k
Stock Options
HSA Contribution
Learning Stipend
Flexible PTO Policy
Quarterly company ME (mental escape) days
Generous Parental Leave policy
Home Office Stipend
Mobile Phone Reimbursement
Home Internet Reimbursement for Remote Employees
Anniversary & Milestone Celebrations
Ontic is an equal-opportunity employer. We are committed to a work environment that celebrates diversity. We do not discriminate against any individual based on race, color, sex, national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any factors protected by applicable law.
All Ontic employees are expected to understand and adhere to all Ontic Security and Privacy related policies in order to protect Ontic data and our clients data.
About the company
Ontic provides software that helps corporate and government security teams identify threats, assess risk, and respond faster to keep people and organizations safe. Its AI-powered Connected Intelligence Platform unifies security operations and data into a centralized system of record, enabling organizations to conduct risk assessments, protect against workplace violence, and manage threats and incidents more efficiently. Fortune 500 companies and federal agencies rely on Ontic to support security programs such as executive protection, threat intelligence, and corporate investigations. Learn more at ontic.ai or follow us on LinkedIn.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.
7 Cloud Computing Trends Coming in 2025 for Developers
Fully Remote Software Engineer Jobs
Is Software Engineering Over-Saturated?