Senior Cloud Security Engineer

Career Tools

About This Role

Beyond Finance is seeking a Senior Cloud Security Engineer to join its team on a remote basis. The company builds customized financial solutions and uses user-centric technology to help clients navigate away from debt. In this role, you will focus on fortifying the security posture of the AWS infrastructure and software development pipelines. You will engage in hands-on tasks such as configuring tools, evaluating architecture, tightening pipeline security, and assisting…

Job Description

Responsibilities

• Manage cloud security across the AWS infrastructure utilizing Wiz and native AWS tools to mitigate risks related to IAM, data exposure, network segmentation, container security, and secrets.
• Define secure defaults in Infrastructure as Code through guardrails, reusable modules, and policy as code.
• Collaborate with the DevOps team to tighten security in CI/CD pipelines.
• Manage cloud and application vulnerabilities by handling intake, tracking SLAs, prioritizing findings, and collaborating with engineers on remediation.
• Develop automation tools to scale the security program, encompassing deduplication, ingestion, workflows for developers, and prioritization.
• Set up telemetry, alerts, and documentation runbooks for managed systems.
• Manage and tune the Web Application Firewall by handling rate limiting, custom and managed rules, and bot mitigation.

Requirements

• At least 5 years of practical security engineering experience focusing on vulnerability management and cloud security.
• Demonstrated background in AWS security including logging, auditing, IAM, networking, and container orchestration.
• Practical experience in securing CI/CD pipelines and Infrastructure as Code using Terraform.
• Direct experience running or significantly contributing to a vulnerability management program.
• Working familiarity with threat modeling and the OWASP Top 10.
• Ability to work independently and manage projects without constant daily supervision.

Qualifications

• Familiarity with the tech stack including Wiz, Spacelift, GitHub Advanced Security, Cloudflare Zero Trust, Gateway, and WAF, as well as native AWS services.
• Production experience with WAF operations such as writing rules, managing false positives, and incident response.
• Exposure to AI and ML security concepts including data poisoning, prompt injection, model abuse, and associated mitigations.
• Experience with identity security for both human and non-human identities.
• Knowledge of secrets management platforms such as AWS Secrets Manager, Infisical, and Keeper.
• Background working in financial services or PCI-regulated environments.
• Familiarity with programming languages like Python, Ruby on Rails, or Go.

Core Skills

Benefits

• Substantial employer contributions for vision, dental, and health coverage.
• Paid parental leave, generous paid time off, and paid holidays.
• Participation in a 401(k) matching program.
• Opportunities for career development, training, and merit advancement.

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.