Cloud Security Engineer , Blockdaemon

• You should be comfortable writing automation, deploying infrastructure-as-code, and getting your hands dirty with tools like Terraform, ArgoCD, Docker, and Vault
• Exceptional problem-solving skills and the ability to work independently in a fast-paced, high-stakes environment
• Proven hands-on experience as a Cloud Security Engineer or in a similar security-focused SRE role
• Deep technical expertise with at least two major cloud providers (AWS, Azure, GCP)
• Expertise with Infrastructure as Code (IaC) tools like Terraform to build and manage secure cloud environments
• Strong proficiency in a scripting or programming language (e.g., Go, Python) for security automation and tool development
• Hands-on experience securing cloud-native workloads (e.g., Docker, Kubernetes, serverless)
• A solid understanding of blockchain fundamentals and a passion for securing decentralized systems

Desirable

• We are looking for a hands-on Cloud Security Engineer to join our security team as an individual contributor. You’ll be responsible for proactively improving our security posture across our multi-cloud infrastructure, CI/CD pipelines, developer tooling, and runtime environments
• You’ll work closely with DevOps, SRE, and engineering teams to secure every stage of the software development lifecycle and operational stack
• This role is highly technical
• Engineer and deploy security controls and automation across our multi-cloud infrastructure (AWS, Azure, GCP)
• Develop and implement Policy as Code and Compliance as Code to automate governance, guardrails, and enforcement directly in our pipelines
• Harden and secure our core infrastructure, APIs and applications, including containers, Kubernetes, serverless, and Infrastructure as Code from design to runtime
• Implement Supply Chain Security best practices, including creating SBOMs, performing dependency scanning, and ensuring artifact signing and provenance checks
• Build and maintain security monitoring, logging, and alerting systems to proactively detect threats and anomalies using AI/ML-driven detection and automation for smarter vulnerability triage and auto-remediation
• Champion a Zero Trust and Identity-first Security model, focusing on granular IAM, continuous verification, and least-privilege by default
• Collaborate closely with our Head of Information Security, DevOps, SRE, and engineering teams to embed security best practices and ensure our systems are resilient
• Drive technical projects to improve our security posture and maintain compliance with SOC 2 and ISO 27001 standards