Cloud Security Engineer

Polymarket

Cloud Security Engineer at Polymarket enhancing AWS security posture across diverse functions. Collaborating with engineering to implement security controls and reduce risks effectively.

Posted 5/15/2026full-timeRemote • New York • 🇺🇸 United StatesMid-LevelSenior💰 $180,000 - $250,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudGoPythonTerraformTypeScriptWeb3

About the role

Key responsibilities & impact

Own and continuously improve Polymarket's AWS security posture across accounts, regions, and services — including IAM policies, SCPs, VPC segmentation, and account-level security baselines
Review and contribute to IaC modules that encode security defaults; integrate automated security checks into the deployment pipeline including policy-as-code validation and misconfiguration scanning
Own cloud-side security telemetry: CloudTrail, GuardDuty, Security Hub, Config Rules, VPC Flow Logs, and S3 access logging
Develop and tune detection logic for cloud-specific threats; partner with the SOC team on alert fidelity, incident response runbooks, and AWS-level investigations
Govern secrets management using AWS Secrets Manager and SSM Parameter Store; manage KMS key policies, rotation, and envelope encryption patterns
Drive remediation of findings from AWS Inspector, Security Hub, and third-party CSPM tooling; maintain benchmarks aligned to CIS AWS Foundations
Support audit and compliance activities (SOC 2, PCI-DSS, or similar) and conduct regular access reviews to identify and remediate privilege creep

Requirements

What you’ll need

4+ years of experience in cloud security, cloud engineering, or a security-focused infrastructure role
Deep, hands-on expertise with AWS security services: IAM, SCP, GuardDuty, Security Hub, CloudTrail, Config, KMS, WAF, Inspector, and VPC
Hands-on experience writing infrastructure as code (Pulumi, Terraform, CDK, or equivalent) with a security-first mindset
Strong understanding of AWS networking and how misconfigurations translate to real attack surface
Proficiency in at least one scripting or programming language (Python, TypeScript, or Go) for automation and tooling
Ability to evaluate architectural decisions for security risk and communicate findings clearly to engineering peers
(Plus) Familiarity with Pulumi, specifically TypeScript-based stacks
(Plus) Familiarity with Web3, blockchain infrastructure, or crypto-sector threat models
(Plus) Experience securing containerized workloads on ECS or EKS, including image scanning and runtime security
(Plus) AWS certifications: Security Specialty, Solutions Architect — Professional, or equivalent
(Plus) Exposure to SOC 2 Type II or PCI-DSS cloud control requirements

Benefits

Comp & perks

Competitive salary & equity
Unlimited PTO
Full Health, Vision, & Dental coverage
401k match
Hardware setup: new MacBook Pro, big display, & accessories

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AWS securityIAMSCPGuardDutySecurity HubCloudTrailConfigKMSWAFTerraform

Soft Skills

communicationrisk evaluationincident responsecollaboration

Certifications

AWS Security SpecialtyAWS Solutions Architect — Professional