Security Engineer

We are seeking a talented Security Engineer to join our growing Security team. The right candidate is someone who has a mix of AWS skills, networking familiarity, curiosity in emerging AI technologies, and a knack for tying it all together securely. ... Your mission will be helping improve Caylent’s security and compliance posture across AWS and various SaaS environments, improving our vulnerability management processes, and keeping Caylent safe against an onslaught of ever-evolving actors and tactics. 

• Review or conduct regular security and vulnerability assessments leveraging automated and non-automated methods on cloud-based and mobile workloads.
• Periodically monitor/audit implementations and ensure they are functioning properly.
• Identify and advise on technical security requirements, review and approve security architecture and control implementations
• Research security standards/tools
• Develop, update, and/or review Security Assessment Reports
• Develop and tune automated tests and rules, and monitor alerts and alarms for deviations from security standards, particularly using AWS tools such as Inspector, CloudTrail, CloudWatch, GuardDuty, Lambda, and Security Hub.
• Identifying, engineering, and building/updating/integrating new and existing security tooling, including cloud-native services
• Advise project teams on current and projected technical security risks, and recommend mitigation strategies to control risk.
• Assist internal development teams in defining and updating application threat models and in interpreting security policies, standards, and control requirements.
• Design vulnerability scans of cloud-based and mobile applications and infrastructure to identify weaknesses, coordinate with app teams to confirm validity of findings, and recommend and assist with mitigations as needed.
• Work with the security governance team to develop and interpret security standards, and build automated and self-service capabilities that validate application security and compliance status against these standards
• Research and identify best practices to harden and secure cloud workloads including cloud native, containers, and Kubernetes clusters at scale
• Coordinate the work of junior team members performing routine and non-routine tasks within the security program.
• Develop and perform developer-focused training in support of security program goals
• Support the SecOps on call team for incident response

• Bachelor's Degree or 2-4 years experience in IT / security roles
• 3+ years of experience in AWS or other public cloud environments
• Security+ and/or some other security certifications
• Experience with IAC languages such as YAML, Terraform, and/or CDK.
• Experience with scripting languages and tools (bash, powershell, etc)
• Experience using a modern programming language such as Python, Node.js (preferredD)
• Others (optional): Typescript, GoLang, Java, C#, Rust, etc
• Experience working with software and app teams throughout the full Software Development Lifecycle (SDLC)
• Experience with code-defined infrastructure, configuration management tools, and CI/CD
• AWS security tooling for scanning, monitoring and alerting tools (Inspector, CloudTrail, CloudWatch, GuardDuty, Lambda, Security Hub)
• A thorough understanding of operational best practices for security in the cloud
• Familiarity with containerization patterns with services like ECS, EKS, Fargate, Kubernetes, etc.
• Proven experience building security reference architecture for all-in AWS cloud deployments
• A solid understanding of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, SSL, HTTP, HTTPS, routing protocols)
• You are comfortable working independently as well as in a collaborative team environment as situation demands
• Effective verbal and written communication skills
• Experience with Cloud Native patterns with services like AWS Lambda, API Gateway, etc.
• Familiarity with and day-to-day knowledge of AI tooling such as Claude and Chatgpt.

• AWS Security Specialty or Professional Level Certification and/or an Anthropic certification.
• Ability to explain/showcase how AI has transformed workloads / processes for you.
• Experience in a consultative, client-facing consulting role
• Strong sense of ownership, urgency, and drive
• Experience and a familiarity of application frameworks such as (RMF, FedRAMP, DoD CC SRG, NIST 800-53, NIST 800-171)
• Previous experience providing training in RMF or explaining cyber security concepts to others in a training like environment
• Datadog experience
• Experience with being on-call / part of an on-call rotation