Cloud Security Lead
Location
United States
Posted
6 days ago
Salary
$130K - $150K / year
Seniority
Lead
No structured requirement data.
Job Description
Cleo is seeking a Lead Cloud Security Engineer to design, implement, and continuously improve security controls across our cloud infrastructure and SaaS environments.
This role is responsible for strengthening Cleo’s AWS security posture, embedding secure-by-default cloud guardrails, and partnering closely with Platform and Engineering teams to reduce infrastructure risk without slowing innovation.
The ideal candidate is hands-on, technically deep in AWS, and experienced in building scalable cloud security capabilities in a high-growth SaaS environment.
What You Will Be Doing
Cloud Security Architecture
- Design and implement secure cloud architecture patterns
- Establish guardrails for AWS accounts and services
- Strengthen multi-account strategy and segmentation
- Improve IAM design, permission boundaries, and least-privilege models
- Review major infrastructure changes for security impact
Cloud Detection and Visibility
- Implement and tune cloud-native detection capabilities
- Integrate AWS security services into centralized monitoring
- Identify misconfigurations and excessive permissions
- Improve signal-to-noise ratio in cloud alerts
Infrastructure as Code Security
- Embed security controls into Terraform or other IaC workflows
- Enforce policy-as-code guardrails
- Ensure IaC scanning is integrated into CI/CD pipelines
- Reduce configuration drift across environments
Vulnerability and Configuration Management
- Oversee cloud misconfiguration detection and remediation
- Track infrastructure vulnerability exposure
- Reduce critical vulnerability exposure window
- Partner with Platform teams to automate remediation
Data Protection and Encryption
- Ensure proper encryption standards across storage and databases
- Manage KMS usage and key lifecycle best practices
- Strengthen logging and monitoring coverage
Incident Response Support
- Lead cloud-focused investigations during security incidents
- Improve forensic readiness in AWS
- Harden logging and evidence retention practices
Automation and Continuous Improvement
- Automate guardrails and enforcement mechanisms
- Improve developer experience with secure cloud defaults
- Reduce manual cloud security reviews
- Optimizing tooling cost and effectiveness
Metrics and Reporting
- Define KPIs for cloud security posture
- Report on misconfiguration trends and exposure windows
- Provide executive-level reporting on infrastructure risk
- Support audit and compliance evidence collection
Your Qualifications
Required
- 7+ years of experience in cloud security, cloud engineering, or infrastructure security
- Deep expertise in AWS architecture and services
- Strong understanding of IAM design and least-privilege principles
- Experience with Infrastructure as Code and CI/CD integration
- Experience implementing cloud-native detection and monitoring
- Ability to translate infrastructure risk into business impact
Preferred
- Experience in mid-market or high-growth SaaS environments
- Experience supporting SOC 2 or similar audits
- Familiarity with policy-as-code frameworks
- Experience building multi-account AWS environments
- Relevant certifications such as AWS Security Specialty, CISSP, or equivalent
A few things we have to offer:
- $130,000 to $150,000 base salary + bonus opportunity
- Great Healthcare + Dental + Vision
- Flexible PTO
- Culture of support, encouraging Life-Work balance
- 401k match
- FSA and HSA options
- Employee Assistance Program
- Paid Parental Leave
- Representing a company with 4,000+ clients and a 99% retention rate
- Accelerated title and salary growth potential
- A fun and energetic work environment that makes you excited to go to work every day
We use artificial intelligence (AI) tools to assist in certain stages of our recruitment process, such as resume screening and candidate matching. These tools are designed to support fair and consistent evaluations. If you have questions about this process or would like to request an alternative assessment method, please contact us at hr@cleo.com.
Cleo Communications US, LLC is an equal opportunity/affirmative action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Cyber Security Engineer
DeepSeasFirst & only Managed Detection & Response solution covering all attack surfaces for enterprises & the mid-market.
Cybersecurity engineers will manage and configure cyber tools, providing technical expertise to maximize client cyber technology effectiveness within the Technology Operations Center. Key duties include answering client inquiries, offering best practices, and operating with autonomy on assigned tasks and client sessions.
Technology & Security Consultant III – Mission Critical AV
AECOMAECOM is a global Fortune 500 multinational engineering company that provides consulting, design, management, and construction services to clients in a broad ra
Technology & Security Consultant managing AV applications and end-user accounts
The teacher is responsible for delivering engaging synchronous and asynchronous learning experiences, managing the learning process, and actively working with students and parents to advance learning goals. Essential functions include differentiating instruction, maintaining academic integrity via grade books, and preparing students for high-stakes standardized tests.
Staff Software Engineer
DoorDash USAAt DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods. DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.
The Staff Software Engineer will architect and build scalable software solutions to simplify complex security workflows, integrate global security technologies, and enhance operational efficiency for security teams. This involves designing microservices, building automation pipelines, and developing APIs, while also guiding technical direction and mentoring other engineers.
