Senior Cloud Security, Compliance Engineer

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $120k - $170k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 5%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

UltraViolet Cyber

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

📦 Logistics

🔒 Cybersecurity

Consulting • Logistics • Cybersecurity

UltraViolet Cyber is a company that specializes in providing advanced cybersecurity solutions, focused on unifying defensive and offensive security practices. They offer a Security-as-Code platform that continuously monitors for threats across an organization's entire attack surface, integrating both red team (attack) and blue team (defense) activities. Their services include Managed Detection & Response, SOC as a Service, Continuous Penetration Testing, and Continuous Threat Exposure Management. UltraViolet Cyber aims to enhance cyber readiness and resilience by enabling organizations to protect themselves at machine speed, efficiently and effectively.

📋 Description

• Administer the Wiz platform as a primary technical resource • Develop custom policies as code • Automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments • Improve cloud security posture through practical, scalable policy engineering • Increase finding quality by reducing false positives and improving detection accuracy • Deliver reusable Terraform modules and secure-by-default infrastructure patterns • Enable engineering teams to remediate risk efficiently through automation and clear guidance • Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring • Build scalable security capabilities across AWS, Azure, and GCP • Strengthen the organization’s ability to identify, understand, and remediate cloud security risk • Use Python and Terraform daily

🎯 Requirements

• US Citizenship is Required • At least five years of hands-on cloud security engineering experience • Production administration, custom rules or Cloud Configuration Rules, policies, and integrations with Wiz or equivalent CNAPP platforms • Proficiency in Python scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools • Deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms • Experience developing reusable, secure-by-default Terraform/HCL modules • Experience with OPA/Rego or an equivalent policy-as-code framework • Ability to assess exploitability and blast radius, prioritize risk, and tune false positives • Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails is preferred • Experience with Kubernetes manifests and container security is preferred • Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins is preferred • Experience supporting audits and continuous monitoring (ConMon) is preferred • Experience mentoring engineers and leading technical discussions is preferred • Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP, are preferred • Candidates must satisfy applicable U.S. regulatory requirements for work in FedRAMP environments