Application Security Engineer

About This Role

This role is a critical, hands-on position to shape and strengthen the client's cloud security landscape. The engineer will lead the design and deployment of cloud security capabilities, ensuring secure development, infrastructure integrity, and strong collaboration across Technology, Engineering, and Product teams. This role goes beyond advisory work to build secure, scalable solutions across cloud platforms and applications.

Responsibilities

• Develop and implement comprehensive cloud security strategies aligned with business objectives
• Assess current security practices, recommend improvements, and drive implementation
• Oversee AWS architecture and ensure optimal security configurations
• Serve as a subject matter expert on AWS services and security best practices
• Design and implement secure containerization strategies using Docker and Kubernetes
• Ensure security across the full lifecycle of containerized applications
• Use Terraform to define and provision secure infrastructure as code
• Implement automated security checks within the IaC pipeline
• Implement and manage security controls, encryption, and identity management within AWS environments
• Conduct regular assessments and audits to identify and mitigate risks
• Partner with developers, operations, and DevOps teams to embed security throughout the SDLC
• Communicate security requirements and best practices to both technical and non-technical stakeholders
• Develop and maintain incident response plans for cloud environments
• Establish monitoring and alerting systems for timely detection and response
• Identify gaps in security posture and prioritize remediation
• Lead and manage security incidents, including root-cause analysis and corrective actions

Requirements

• 5+ years of hands-on AWS experience, including AWS security services
• 5+ years working with Docker and Kubernetes
• 5+ years as a Cloud Security Engineer or Architect
• 5+ years implementing cloud security controls, encryption, and identity management
• 2+ years of Terraform experience
• Familiarity with DevOps principles and integrating security into CI/CD pipelines
• Strong written and verbal communication skills

Qualifications

• 5+ years of hands-on AWS experience, 5+ years working with Docker and Kubernetes, 5+ years as a Cloud Security Engineer or Architect, 5+ years implementing cloud security controls, encryption, and identity management, 2+ years of Terraform experience.

Nice to Have

• Knowledge of IL5, FedRAMP, and government cloud security standards
• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field
• Certifications such as CISSP, CCSP, OSCP, GIAC, AWS Security Specialty, AWS Solutions Architect Professional, AWS DevOps Engineer Professional, CKA, or CKS

Skills

* Required skills

Benefits