Staff Cloud Security Engineer

🕒 July 15

🐎 Kentucky, Maryland, +1 more states – Remote

🐎 Kentucky – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote

💵 $180k - $200k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Xometry

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2013

🚘 Automotive

🏥 Healthcare

📦 Logistics

💰 $75M Series E on 2020-09

Automotive • Healthcare • Logistics

Xometry is a leading digital manufacturing marketplace, offering a comprehensive range of on-demand manufacturing and production solutions. Specializing in 3D printing, CNC machining, injection molding, and sheet metal fabrication, Xometry serves industries such as aerospace, automotive, medical, and electronics. The company provides instant quoting, DFM feedback, and quality assurance through its massive global supplier network, enabling clients to efficiently manage prototyping, high-volume production, and custom part manufacturing. Xometry emphasizes environmental sustainability with initiatives like carbon emission offsetting, and offers features such as the Xometry Instant Quoting Engine and Teamspace for streamlined project collaboration.

📋 Description

• Own CrowdStrike Falcon configuration, ensuring policies are appropriately scoped, tuned, and generating actionable alerts • Partner with MDR to define alert routing, triage thresholds, and escalation logic • Monitor primarily AWS cloud environments for security posture drift, including misconfigured IAM roles, overly permissive security groups, exposed storage, and non-compliant resource configurations • Secure Kubernetes clusters and containerized workloads by managing Network Policies, RBAC, Admission Controllers, and runtime detection for anomalous container behavior • Develop and enforce cloud security policies and standards for AWS infrastructure • Evaluate and lead implementation of additional detection tooling, including cloud SIEM platforms • Design detection rules and alerting pipelines • Manage infrastructure-as-code security using Terraform or OpenTofu • Automate security posture checks and detection workflows using Python and shell scripting • Track the evolving cloud threat landscape and translate emerging threats into detection coverage or posture improvements • Own cloud security posture and runtime detection capabilities across live cloud environments and containerized workloads • Evaluate migration to a new SIEM

🎯 Requirements

• Minimum 8 years of experience in cloud security, security engineering, or a related infrastructure security discipline • Hands-on experience with a cloud security posture management (CSPM) platform — CrowdStrike, Wiz, Prisma Cloud, Orca, or equivalent • Deep familiarity with AWS security architecture: IAM/SCP policy design, VPC networking, security groups, CloudTrail, and cloud-native security controls • GCP or Azure experience considered in lieu of AWS for strong candidates willing to expand into AWS • Proficiency with infrastructure as code (IaC) tools such as Terraform, OpenTofu, or CloudFormation • Understanding of how to enforce security standards within IaC workflows • Strong Python and shell scripting skills for security automation, detection rule development, and tooling integration • Must be a US Citizen or legal permanent resident • AWS GovCloud experience preferred • Hands-on Kubernetes security experience preferred, including Network Policies, RBAC, and Admission Controllers • Experience with cloud-native SIEM solutions preferred, including writing detection rules in Python or SQL • Experience securing microservices architectures preferred, including service mesh security (Istio or Linkerd) • Bachelor’s degree in Computer Science, Information Security, or a related field preferred

🏖️ Benefits

• Bonus • 401(k) match • Medical, dental and vision insurance • Life and disability insurance • Generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave • EAP • Other wellbeing resources