> Markdown version of [/jobs/ext/2718949-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2718949-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Mtd Products Inc - **Location:** Dallas, TX, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Android Software Development, Apple IOS, Application Firewall, Microsoft Azure, Cloud Computing Security, Cloud Engineering, Cyber Security, Linux, Key Management, Network Security, Linux System Administration, Machine Learning, Phishing, Mobile Security, Google Cloud, Multi-Cloud, Firewalls (Computer Science), Infrastructure as Code (IaC), Cloudformation, Containerization, Kubernetes, Hashicorp, Terraform, Prisma Cloud Platform, Oracle Cloud Infrastructure, Devsecops, Serverless Computing, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/sr-cloud-security-engineer-fedramp-zimperium-7958376 ## About the Role Location: USA (Dallas Preferred), 8+ years of progressive experience in IT, with at least 5 years dedicated to Cloud Security Engineering in a multi-cloud environment. - Expert-level proficiency in Infrastructure as Code (IaC) for security automation using Terraform and/or CloudFormation. - Deep practical experience securing at least three of the following major cloud providers: AWS, Azure, GCP, and OCI. - Proven expertise in system hardening using industry standards like CIS Level 2 and DISA STIGs. - Extensive experience with Linux administration and securing containerization technologies, specifically Kubernetes. - Hands-on experience with advanced security platforms, including at least two of the following: Palo Alto Prisma Cloud, Orca, Google SecOps, and Palo Alto Next Generation Firewalls. - Demonstrated experience with WAF solutions, such as F5 or equivalent cloud-native services. - Strong working knowledge of DevSecOps principles, including integrating security tools into CI/CD pipelines. - Proven experience with Secret Management solutions (e.g., HashiCorp Vault, AWS Secrets Manager). - Excellent written and verbal communication skills, including the ability to write executive-level reports and deliver technical presentations. - Proven ability to operate independently and take ownership of critical responsibilities. Preferred Requirements: - Experience working within highly regulated environments, such as FedRAMP, DoD, or similar government/financial sectors. - Demonstrated experience with implementing and maintaining controls for security frameworks such as ISO 27001 and SOC 2. - Experience conducting formal threat modeling and risk analysis. - Experience gained from both a large enterprise environment (for process and scale) and a fast-paced startup/tech company (for agility and innovation). - Relevant industry certifications (e.g., CISSP, CCSP, AWS/Azure/GCP Security Specializations). ## Description Zimperium® is an industry leader in enterprise mobile security, being the first and only company to provide a complete mobile threat defense system that offers real-time, on device world-class protection against both known and unknown next generation of advanced mobile cyberattacks and malware. Our MTD and award-winning machine learning-based engine protects against device, network, phishing and application attacks for IOS, Android and Windows devices, using a non-intrusive approach to always protect privacy of users., We are seeking a highly experienced and self-directed Senior Cloud Security Engineer to join our team. This critical role is responsible for designing, implementing, and maintaining robust security controls across our multi-cloud environment. The ideal candidate will possess deep technical knowledge, a proactive, automation-first mindset, and the ability to operate independently, taking full ownership of security responsibilities in a fast-paced environment., Multi-Cloud Security Architecture: Design, implement, and manage security best practices and controls for services hosted across AWS, Azure, GCP, and OCI environments. Infrastructure as Code (IaC) & Automation: Act as the subject matter expert for security automation, leveraging CloudFormation and/or Terraform to deploy secure infrastructure consistently and at scale. System Hardening: Implement and enforce rigorous security configuration benchmarks, specifically CIS Level 2 and DISA STIGs, across all compute environments, including various flavors of Linux and Kubernetes clusters. Security Tooling & Operations: Configure, manage, and optimize cloud-native and third-party security tools such as Palo Alto Prisma Cloud, Orca, Google SecOps, and Palo Alto Next Generation Firewalls. Application & Network Defense: Deploy and manage Web Application Firewalls (WAFs), including F5 and other cloud-native WAF solutions, to protect critical applications. DevSecOps & Pipeline Security: Integrate security testing tools (SAST, DAST, SCA) into CI/CD pipelines to enable "shift-left" security practices. Secrets and Key Management: Design and maintain solutions for the secure storage and rotation of credentials, API keys, and secrets using tools like HashiCorp Vault or equivalent cloud-native services. Risk & Design Review: Conduct threat modeling and perform security reviews for new applications and services to proactively identify and mitigate risks in the design phase. Incident Response & On-Call: Participate in a rotating on-call schedule to address security incidents and operational issues promptly. Compliance & Reporting: Support internal and external audits by generating evidence, writing detailed reports, and delivering clear, concise technical presentations to leadership. Leadership & Mentorship: Operate with minimal oversight, taking the initiative to identify and suggest security improvements and drive projects to completion. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)