Cloud Security Engineer, Fullscript

• 4+ years of security engineering experience, including 2+ years focused on cloud security in AWS and/or Google Cloud
• Strong understanding of cloud-native attack paths, IAM risks, network controls, data protection, key management, secrets management, and workload identity
• Hands-on experience with infrastructure-as-code, ideally Terraform, and a strong understanding of how to secure it at scale
• Ability to write code in Python, Go, or a similar language to automate detection, remediation, and security workflows
• Experience integrating security tooling into CI/CD pipelines and developer workflows without creating unnecessary friction
• Working knowledge of at least one compliance framework such as SOC 2, HIPAA, HITRUST, PCI-DSS, or ISO 27001, with the ability to translate requirements into technical controls
• Strong communication and collaboration skills, with a bias toward enabling teams, influencing without authority, and helping engineers build securely

Desirable

• Fullscript is looking for a Cloud Security Engineer to help secure the cloud platforms that power care delivery for millions of patients
• In this role, you’ll partner with engineering teams to design, build, and operate secure-by-default cloud infrastructure across AWS and Google Cloud
• You’ll help protect sensitive health data, harden our cloud footprint, automate guardrails, and move cloud security from project-by-project work into a scalable, programmatic practice
• You’ll work closely with Security Engineering, GRC, SOC, Platform Engineering, and product teams to prevent, detect, and respond to cloud-native threats
• This is a hands-on engineering role for someone who likes solving complex infrastructure problems with code, cares about helping teams ship securely, and wants their work to support better patient outcomes
• Design and implement cloud security controls across AWS and Google Cloud, including multi-account architecture, network segmentation, data protection, and secure-by-default infrastructure patterns
• Build reusable Terraform modules, reference architectures, policy-as-code guardrails, and self-service tooling that make secure implementation easier for engineering teams
• Operate and tune CSPM/CNAPP tooling to identify misconfigurations, exposures, toxic combinations, and coverage gaps across Fullscript’s cloud environments
• Drive remediation of cloud vulnerabilities and misconfigurations, balancing risk, engineering effort, customer impact, and business priorities
• Strengthen IAM, secrets management, key rotation, cloud credentials, machine identities, and just-in-time access patterns across cloud and SaaS environments
• Embed security into CI/CD pipelines through IaC scanning, container image scanning, SBOM generation, artifact protection, and software supply chain controls
• Partner with the SOC and engineering teams on cloud-native detections, logging, runbooks, incident response, post-incident learning, and secure AI/ML workload patterns

• Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. If there’s a match, our team will reach out directly