Senior Cloud Security Engineer, Figment

• We are seeking a Cloud Security Engineer with a strong background in cloud security, DevOps, and platform engineering to help secure and maintain our cloud infrastructure
• The ideal candidate will bring a security-first mindset while working on infrastructure deployments, automation, and cloud-native security solutions
• 3+ years of experience in Cloud Security, DevOps, or Platform Engineering
• Strong experience with AWS and/or GCP security principles
• Up-to-date knowledge of cloud security advisories and vulnerabilities
• Hands-on experience managing Kubernetes clusters and implementing security best practices
• Knowledge of container security, runtime protection, and Kubernetes network policies
• Experience engineering and maintaining Identity and Access management systems and RBAC
• Experience in security reviews of cloud applications
• Proficiency in scripting for automation
• Strong technical writing and communication skills

Desirable

• This role will be responsible for securing cloud environments, managing Kubernetes clusters, and ensuring that our cloud infrastructure is resilient, secure, and scalable
• You will work closely with engineering teams to design and implement security best practices in a fast-paced, highly scalable cloud environment
• This full-time remote position requires participation in an on-call rotation
• Design, implement, and manage security controls for cloud infrastructure in AWS and GCP
• Develop and enforce security policies, IAM roles, and least privilege access across cloud environments
• Implement and maintain cloud security monitoring, logging, and alerting using tools like AWS GuardDuty, Security Hub, and GCP Security Command Center
• Secure Kubernetes workloads by implementing RBAC, network policies, and container runtime security
• Conduct regular cloud security assessments, including misconfiguration reviews, vulnerability management, and compliance checks
• Deploy and maintain cloud infrastructure using code
• Design secure CI/CD pipelines, ensuring that security scanning is integrated into build and deployment processes
• Automate deployments and infrastructure updates with CI/CD pipelines
• In addition to collaborating with other Cloud Security team members, this role will collaborate most often with our Internal Security and Engineering teams

• We strive for a smooth, organized, and informative process
• During your first Recruiter Call, you will be provided with more information about Figment, the position and what to expect for the rest of the interview process. Please be prepared to discuss why you are interested in joining Figment and what excites you about the position and company
• As we go through the process, we work to make sure that you hear back from us in a timely fashion. If we decide at any point that we’re unfortunately not moving forward, we will give you feedback on why it was not a fit
• We aim for the entire process to take around 2-3 weeks from initial screen to offer. There can be exceptions on either side of the bell curve here, but as a rule, that’s the time-frame you can expect