Senior Cloud Security Engineer

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $200k - $250k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tessera Labs

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

Artificial Intelligence • Enterprise • SaaS

Tessera Labs is a vendor-agnostic, multi-agent AI systems integration platform that gives enterprises a single, unified view across their IT architecture. Pre-trained on thousands of enterprise landscapes and hundreds of years of business process expertise, Tessera adapts to each customer environment to harmonize systems and data and to enable secure, governed execution across ERP and other critical systems. The company emphasizes enterprise-grade governance and controls for regulated industries, accelerating time-to-value while evolving with new data and workflows, and is built on published AI research and patented technology.

📋 Description

• Own the security posture of cloud environments across AWS, GCP, and Azure • Design secure reference architectures and reusable patterns for account/project structure, network segmentation, encryption, key management, and secrets management • Build security into IaC through hardened modules, policy as code, and pre-deploy checks • Secure CI/CD pipelines and the software supply chain • Design and enforce least-privilege IAM, federation, and periodic access reviews • Write code and scripts to automate security controls, remediation, and evidence collection • Operate and tune CSPM and cloud-native security services, driving findings through remediation • Build logging and detection for cloud control-plane and workload activity • Lead the cloud side of incident response • Contribute security controls and evidence to SOC 2, ISO 27001, and similar compliance efforts • Map the cloud footprint and identify priority risks with a remediation plan during the first 90 days • Establish baseline guardrails, centralized logging, and posture monitoring across cloud accounts and projects • Automate infrastructure-change security checks in CI/CD and support early security engagement by engineers • Partner with platform and infrastructure engineering, customer support, delivery teams, IT, and compliance

🎯 Requirements

• DevOps, Site Reliability Engineering (SRE), or platform engineering experience • Production infrastructure and CI/CD pipeline operation experience • Hands-on production experience securing at least two major cloud providers: AWS, GCP, or Azure • Understanding of differences among cloud identity, networking, and logging models • Deep knowledge of cloud security best practices, including CIS Benchmarks and provider security foundations guidance • Knowledge of least-privilege IAM, workload identity, network segmentation, private connectivity, encryption and key management, secrets management, centralized logging, and preventive guardrails • Strong coding and scripting skills in at least one general-purpose language such as Python or Go, plus shell scripting • Hands-on IaC experience, such as Terraform or OpenTofu, including embedding security checks • Strong communication skills • Familiarity with open-source cloud security tooling such as Prowler, Checkov, Trivy, OPA, or Falco • Container and Kubernetes security experience, including admission control and runtime policy • Relevant cloud security certification is nice to have • Experience securing SaaS and developer platforms, such as identity providers and GitHub organizations • Experience supporting SOC 2, ISO 27001, or similar compliance programs • Hands-on cloud incident response or forensics experience • Must be authorized to work in the U.S. for Tessera Labs