Federal Senior Cloud Security Engineer, Horizon3
Autonomous security solutions
Be an early applicant
Autonomous security solutions
201-500 employees
Be an early applicant
201-500 employees
Company mission
To help find and fix attack vectors before attackers can exploit them.
Role
Who you are
- AWS Expertise: Deep knowledge of AWS services and security architecture
- Automation Proficiency: In-depth knowledge of Terraform and GitLab CI/CD strategies
- Framework Fluency: Familiarity with cybersecurity frameworks such as NIST, CIS, and MITRE ATT&CK
- Analytical Problem Solving: Excellent skills in log processing, event analysis, and incident management
- Communication: Excellent verbal and written skills, with the ability to explain complex technical concepts to non-technical stakeholders
- Integrity & Ownership: Demonstrated commitment to process improvement, technical integrity, and a "learn-it-all" attitude
- Education: Bachelor's degree in Computer Science or Cybersecurity; Military Service Equivalent
- Experience: Minimum five (5) years of experience in securing AWS environments; 5+ years of general cybersecurity experience
- Certifications: AWS Certified Security - Specialty preferred; CISSP or relevant security certifications preferred
- Clearance/Auth: Must be authorized to work in the U.S. and pass a criminal background check
- U.S. Government Security Clearance is a plus
What the job involves
- The Sr. Cloud Security Engineer, Federal performs the tasks necessary to analyze, design, configure, implement, and validate security solutions for H3’s AWS GovCloud infrastructure
- This role serves as a technical leader and "self-starter," working closely with the Director of Federal Operations, Security Operations Manager, and engineering teams to ensure a secure and compliant cloud architecture
- Tasks will consist of developing security guardrails, automating threat detection, and managing the end-to-end security lifecycle within the CI/CD pipeline. This position prioritizes Federal AWS environments and compliance (FedRAMP, IL-4/5) while providing subject matter expertise and support for commercial cloud security as the Federal Team grows
- Cloud Security Engineering: Design and implement robust security controls across AWS environments, including AWS IAM, SCPs, VPC security, S3 bucket policies, and key management
- Infrastructure as Code (IaC): Utilize Terraform to deploy and manage security configurations, ensuring "Security as Code" is integrated into all cloud deployments
- DevSecOps Integration: Implement and maintain GitLab CI/CD pipelines for automated security testing and scanning of AWS resources
- Posture Management & Monitoring: Continuously monitor and improve cloud security posture by managing and tuning services such as GuardDuty, Security Hub, AWS WAF, and CloudTrail
- Identity & Access Management: Define and enforce IAM best practices, including least privilege, federated identity, RBAC, and automated remediation of deficiencies
- Threat Modeling & Assessment: Conduct architecture reviews and risk assessments for new cloud features to identify and mitigate vulnerabilities before deployment
- Incident Response & Analysis: Investigate suspected attacks and lead security incident management, providing post-mortem analysis and developing long-term preventive measures
- Compliance & Standards: Develop and maintain security policies and procedures to ensure compliance with FedRAMP and DoD IL-4/5
- Reporting & Metrics: Develop creative reporting mechanisms and metrics to communicate cloud risk and security themes to business owners and leadership
Our take
In an era marked by escalating cyber threats and data breaches, safeguarding digital assets has become a high priority across all industries. Amid this landscape, Horizon3.ai stands out as an autonomous security solution by addressing the critical need for robust cybersecurity.
At the heart of Horizon3.ai's mission is NodeZero™, a platform designed to elevate proactive security measures. Using this, customers can verify their security posture and identify potential vulnerabilities through self-service. This proactive approach to cybersecurity effectively thwarts potential exploits and ensures the integrity of their digital infrastructure.
With 2025 funding in hand, the company is poised to further its ambition to develop into an industry-leading cybersecurity company. The infusion of funds will be channelled towards expanding its partner network, refining its offerings and entering the US government market. Horizon3 aims to establish itself as a pivotal player in the evolving autonomous security landscape, a highly lucrative market valued at $80 billion.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-8% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jun 2025
$100m
SERIES D
Aug 2023
$40m
SERIES C
Total funding: $187m
Company benefits
- Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
- Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
- Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work
- Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
Company HQ
SoMa, San Francisco, CA
Leadership
Snehal Antani
(Co-Founder & CEO)Graduated from the Rensselaer Polytechnic Institute with an MS in Computer Science. Previously worked at IBM as a Lead Architect, at GE Capital as the CIO of Distribution Finance and Splunk as the SVP & GM of Business Analytics & IoT.
Anthony Pillitiere
(Co-Founder)Graduated from the University of Maryland with a Bachelor's Degree in Computer Systems Networking and Telecommunications. Previously worked at the United States Air Force in multiple roles, including Deputy Chief Technology Officer.
Share this job
View 51 more jobs at Horizon3