Senior Cloud Security Engineer (Remote, Colombia or Costa Rica)

About the role

The client develops AI‑powered intelligence and document‑analysis solutions for commercial and U.S. government customers. As a senior cloud security engineer you will be the sole security point of contact, working closely with a small DevOps team on an AWS‑first platform.

Key responsibilities

• Own day‑to‑day cloud security operations, including IAM design, GuardDuty, Security Hub and CloudTrail monitoring.
• Perform security alert triage, incident response, and support SOC 2 audit evidence collection.
• Manage vulnerability scanning, prioritisation and remediation coordination with engineering teams.
• Implement security controls in Terraform pull‑requests and maintain Kubernetes security (RBAC, workload hardening).

Required profile

• Hands‑on experience with AWS security services and least‑privilege design.
• Comfortable working with Terraform, GitHub Actions and CI/CD pipelines.
• Experience supporting SOC 2 audits and familiarity with federal compliance frameworks (CMMC, NIST 800‑171, FedRAMP).

Required skills

• AWS (IAM, GuardDuty, Security Hub, CloudTrail)
• Terraform
• Kubernetes security (RBAC, workload hardening)
• Vulnerability management tools
• SOC 2 audit processes
• CI/CD and supply‑chain security (GitHub Actions, dependency scanning)
• CrowdStrike Falcon
• Azure security (Microsoft Defender, Azure DevOps)
• Cloudflare Zero Trust and WAF
• Packer for AMI pipelines
• Python scripting for security automation