Senior Cloud Security Engineer

About the Role

Iterable's Security team leads a cross-functional effort across the company to ensure all systems remain secure and customer data is protected. As a Senior Cloud Security Engineer, you will actively lead efforts to improve Iterable's security posture alongside engineering teams building new features and services, fostering security by design through automation, assessments, technical reviews, and vulnerability evaluation.

Responsibilities

• Review system designs and implementations, and consult with engineers across the organization to identify and/or avoid security issues through alignment with security standards and best practices, document and ensure security issues are appropriately remediated.
• Leverage subject matter expertise of systems and infrastructure to propose solutions and drive architectural improvements that address classes of security vulnerabilities.
• Develop and implement cloud and infrastructure security architecture and contribute to overall strategy and roadmap plans.
• Participate in the selection, design, development, implementation, and management of automated security testing tools, such as cloud security posture management and image vulnerability scanners.
• Implement solutions that integrate into CI pipelines to shift security as far left as possible and raise concerns early to engineering teams.
• Promote DevSecOps principles and implement Infrastructure as Code (IaC) scanning and policy enforcement to ensure deployments via Terraform, AWS CloudFormation, or similar are secure and compliant.
• Coordinate and participate in penetration tests of our cloud services.

Qualifications

• 5+ years of hands-on experience in Cloud Security, SRE, DevOps, DevSecOps, or Infrastructure Engineering.
• Strong working knowledge of Kubernetes and ecosystem tools such as Helm and Argo CD.
• Production experience with AWS services, particularly AWS Organizations, AWS Identity (SSO), IAM, Service Control Policies (SCPs), Virtual Private Clouds, Elastic Load Balancers, CloudTrail, and Security Groups.
• Proficiency with Terraform.
• Experience developing custom actions or workflows in GitHub or GitLab.
• Solid understanding of cloud security vulnerabilities, defense techniques, and security best practices.
• Proficiency in a high-level programming language such as Python or Go.
• Familiarity with policy management tools such as OPA or Kyverno.

Bonus Points

• Scala or JVM ecosystem experience.
• Familiarity with common observability tools such as Datadog, Prometheus, or Grafana.
• Experience with AWS EKS.
• Experience with Panther SIEM.
• Hands-on work standing up and operationally using Jupyter notebook instances.