Cloud Security Engineer – AWS Focus

Ledgebrook

Cloud Security Engineer focused on AWS cloud security practices and architectures at Ledgebrook. Designing secure systems and collaborating with DevOps for enhanced security measures.

Posted 4/20/2026full-timeRemote • California • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudFirewallsPythonTerraform

About the role

Key responsibilities & impact

Design, implement, and manage secure AWS cloud architectures, including networking, IAM, and service configurations.
Develop and enforce cloud security standards, policies, and guardrails across AWS environments.
Implement automated security controls using tools like Terraform, AWS Config, Security Hub, GuardDuty, and Inspector.
Collaborate with DevOps and engineering teams to integrate security into CI/CD pipelines (DevSecOps).
Monitor and respond to security events using SIEM and cloud-native logging tools (CloudWatch, CloudTrail, AWS Security Hub, etc.).
Conduct threat modeling, risk assessments, and security architecture reviews for AWS-based applications and services.
Maintain and optimize identity and access management across AWS accounts using IAM, SSO, SCPs, and Organizations.
Manage data protection strategies, including encryption (KMS), DLP, and secure key management.
Support compliance initiatives (e.g., SOC 2, HIPAA, ISO 27001, or FedRAMP) with evidence collection and policy implementation.

Requirements

What you’ll need

3+ years of experience in a Cloud Security, Security Engineering, or related role.
Strong knowledge of AWS security services, architectures, and best practices.
Experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation.
Hands-on experience with cloud monitoring and logging, especially in an AWS context.
Proficiency in scripting or automation (e.g., Python, Bash, or PowerShell).
Solid understanding of network security, firewalls, VPC design, and zero-trust principles.
Familiarity with incident response processes, SIEM platforms, and forensics tools.
Comfortable working cross-functionally with engineering, IT, and compliance teams.
Self-starter with a proactive approach to risk identification and mitigation.
Willingness to participate in an on-call rotation or security incident escalations as needed.

Benefits

Comp & perks

Competitive salary and meaningful equity ownership
Health Insurance 100% employer-paid option available (US only)
Additional benefits available include 401k plan, dental, vision & other options (US only)
Remote work, flexible hours
Unlimited time off policy

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AWS cloud architecturecloud security standardsautomated security controlsInfrastructure as Codescriptingnetwork securitythreat modelingrisk assessmentsdata protection strategiesencryption

Soft Skills

collaborationproactive approachcross-functional teamworkself-starterrisk identificationmitigation

Certifications

SOC 2HIPAAISO 27001FedRAMP