> Markdown version of [/jobs/ext/3071822-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/3071822-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** All Inc.
- **Location:** New York, United States (Remote available)
- **Experience:** Expert
- **Salary:** $163,000.0 - $206,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Software Debugging, Identity and Access Management, Python (Programming Language), Network Planning and Design, Public Key Infrastructure, Security Information and Event Management, TypeScript, Scripting, Amazon Virtual Private Cloud (VPC), Kubernetes, Terraform
- **Published:** September 25, 2026
- **Apply:** https://www.dice.com/job-detail/7aa870f0-6d56-41c4-b507-3db1c7ac9894

## About the Role

Must-haves:

 * 3+ years in cloud security, or in cloud infrastructure with a security focus, primarily in AWS
 * Hands-on with AWS networking and security services: VPC design, security groups, NACLs, WAF, GuardDuty, Config, Inspector, KMS, and IAM
 * Provisioning infrastructure as code with Terraform and working knowledge of Kubernetes or EKS
 * Working experience with a SIEM and a CSPM, including tuning alerts and building detections that engineers act on
 * Scripting or programming in Python or TypeScript, with an eye for where the code itself creates risk
 * On-call incident response experience, and the ability to explain risk and remediation to engineers who do not work in security

Nice-to-haves:

 * AWS Organizations and multi-account environments
 * AWS Solutions Architect Associate or AWS Security Specialty
 * Public key infrastructure and applied cryptography

## Description

You'll own the security of Alloy's AWS environment and the tooling that keeps it visible. You will work closest with the Infrastructure team, but your reach will extend to every engineering team.

 * Partner with the Infrastructure team to build security into new cloud infrastructure as it is designed, and act as the security point of contact for new builds
 * Lead initiatives you scope yourself to reduce cloud infrastructure risk in ways that are repeatable and maintainable
 * Build alerts, detections, and dashboards in our CSPM and SIEM, and write the runbooks that make them actionable for the people who get paged
 * Own CSPM findings end to end, from triage through remediation, including the Terraform changes that fix the problem at its source
 * Drive AWS permissions and network design toward least privilege, and debug both without widening the attack surface in the process
 * Join the on-call rotation, investigate security incidents to root cause, and put controls in place so the same incident does not recur


## Related Videos

- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Do TypeScript without TypeScript](https://www.wearedevelopers.com/videos/327-do-typescript-without-typescript)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)