Senior Cloud Security Engineer (AWS & Compliance)

Location: United States (Mid-Atlantic preferred)

Employment Type: Full-Time

About The Role

We’re hiring a Senior Cloud Security Engineer to help secure and scale a highly distributed, cloud-native platform operating in a mission-critical and regulated environment. This role blends hands-on AWS security engineering with governance, compliance, and secure architecture design.

You’ll work closely with platform, DevOps, and engineering teams to implement secure-by-design practices, strengthen cloud security posture, and ensure systems meet rigorous compliance standards.

Key Responsibilities

Design and enhance AWS cloud security architecture, with a focus on IAM, least privilege, and secrets management
Implement and enforce network security controls (VPC segmentation, security groups, NACLs, private connectivity)
Partner with DevOps and engineering teams to secure Infrastructure-as-Code (Terraform) and CI/CD pipelines
Define and maintain security standards, policies, and control frameworks (e.g., NIST, SOC2)
Build and streamline audit readiness and evidence collection processes
Configure and optimize logging, monitoring, and alerting for detection and response
Conduct threat modeling, risk assessments, and security reviews
Support and improve incident response processes and playbooks
Document security architectures, patterns, and exceptions

Required Experience

7+ years in cybersecurity, cloud security, or platform security engineering
Strong hands-on experience securing AWS environments
Deep knowledge of:
- IAM and identity security
- VPC/network security architecture
- Logging, monitoring, and incident response
Experience with Infrastructure-as-Code (e.g., Terraform)
Scripting or programming experience (Python, Go, or Bash)

Preferred Experience

Experience in regulated or compliance-driven environments
Familiarity with frameworks such as NIST or SOC2
Experience implementing policy-as-code and security guardrails
Background in high-reliability or safety-critical industries (e.g., aerospace, defense, robotics, industrial systems)
Exposure to cloud-native logging and detection systems
Relevant certifications (e.g., AWS Security Specialty, CISSP)

Technology Environment

AWS (core cloud platform)
Terraform, CI/CD pipelines
Python / Go / Bash
Docker & cloud-native infrastructure
Centralized logging platforms (e.g., ELK stack)

What We’re Looking For

Strong collaboration skills across engineering and security teams
Ability to balance security rigor with delivery speed
A risk-based mindset with strong analytical skills
Clear communicator with experience documenting technical decisions

EVONA vacatures

Cyber Security Engineer

Never Miss a New Opportunity