Senior Security Engineer, Cloud Security

About this role

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. SpyCloud's solutions thwart cyberattacks and protect more than 4 billion accounts worldwide. Cybersecurity is an exciting, evolving space, and being at the forefront of the fight to disrupt cybercrime makes SpyCloud a special place to work. If you're driven to align your career with a fantastic mission, look no further!

At SpyCloud, security isn't just about reducing risk–it's about enabling innovation. Our engineering-forward security team designs frictionless, scalable solutions that empower our teams to build with confidence.

As a Senior Cloud Security Engineer, you'll help shape our security guardrails that protect SpyCloud's cloud environments and internet-facing services. If you're excited to tackle complex security challenges, shape modern cloud defense strategies, and drive security innovation, we'd love to hear from you!

What You'll Do:

- Cloud & Platform Security Engineering
- - Design, implement, and operate cloud security controls across production and internal environments (primarily AWS).
- Own cloud posture management workflows (risk-based triage, exception handling, and automated remediation).
- Build and maintain secure-by-default templates and modules (standards, defaults, account structure, secret management, segmentation).
- Embed policy-as-code and IaC security controls into CI/CD (PR checks, drift detection) to prevent misconfigurations.
- Reduce external and cloud risk by:
- Own attack surface discovery/governance and baseline edge protections (e.g., WAF/rate limiting),
- Drive automation for triage/remediation and operational efficiency by reducing repeat misconfigurations/toil (triage, routing, dedupe, validation, reporting).
- Standardize cloud logging/telemetry and ensure it integrates cleanly into detection/IR workflows.
- Team Collaboration and Growth
- - Work cross-functionally with Product, IT, DevOps, and Engin...