FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security engineering and cloud infrastructure, particularly in AWS, with a strong focus on agent development, vulnerability management, and incident response. Proficient in translating complex security concepts for diverse audiences while ensuring robust security practices across cloud environments.
Highest-signal resume keywords
AWS Security EngineeringAgent Development ExperienceProduction Kubernetes SecurityInfrastructure As Code (Terraform)Cloud Security Incident Investigation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security EngineeringAWS IAMKubernetes SecurityPythonGoTypeScriptInfrastructure MonitoringVulnerability ManagementCloud Audit InvestigationAutomated Security Checks
Soft Skills
Clear CommunicationMentoringCollaboration
Tools & Technologies
TerraformCloudTrailGuardDutyAccess AnalyzerSIEMCNAPPGVisorFirecrackerKata
Industry Keywords
Cloud InfrastructureSecurity ProposalsIncident ResponseLeast-Privilege AccessContinuous Monitoring
Tech Stack
Tools & technologiesAWSCloudDNSFirewallsKubernetesPythonTerraformTypeScriptGo
About the role
Key responsibilities & impact- Review infrastructure proposals and designs from engineering and non-engineering teams.
- Write security proposals and review resulting changes.
- Translate security requirements and agent findings into guidance for less-technical partners.
- Build, evaluate and maintain agents for reviews, triage and investigations.
- Help operate sandboxed, observable infrastructure for security agents.
- Lead cloud and infrastructure alerts and incidents through resolution and root cause.
- Collaborate with AppSec and incident response on cross-functional incidents.
- Advance least-privilege and just-in-time access for people, CI and services across the cloud organization.
- Deliver secure building blocks that teams adopt by default.
- Harden container, serverless and virtual machine workloads, network perimeter and CI/CD pipelines.
- Add automated checks to prevent recurring security issues.
- Move vulnerability, access and attack-surface reviews to continuous monitoring and generate infrastructure-control audit evidence.
Requirements
What you’ll need- 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale.
- At least a year of agentic development experience, including building agent skills and tools, maintaining development harnesses, and managing configuration, permissions, integrations, evaluations and cost controls.
- Ability to secure agents against prompt injection, over-privileged tools and unaudited actions; explain the confused deputy problem and lethal trifecta; validate agent output against evidence and determine where human review is required.
- Deep AWS IAM experience, including IAM Identity Center or equivalent SSO, SCPs, permission boundaries, resource and key policies, cross-account trust, and policy simulation.
- Production Kubernetes security on EKS or similar, including RBAC, workload identity, network policy, admission control and container runtime hardening.
- AWS networking security experience covering VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control and WAF.
- Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and security-impact plan review.
- Experience with CNAPP, SIEM or runtime security tooling and cloud detection sources such as CloudTrail, GuardDuty and Access Analyzer.
- Experience investigating cloud and infrastructure security events using cloud audit, Kubernetes, identity and network logs.
- Track record of architecture reviews, design proposals, secure design guidance, mentoring through reviews and driving adopted changes.
- Python, Go or TypeScript for security automation.
- Clear written and verbal communication, including explaining technical risk to non-technical partners.
- Desirable: AI agents in SOC or incident response workflows; sandboxed runtimes such as gVisor, Firecracker or Kata; offensive security or cloud/Kubernetes red-team experience; OPA or Rego; automated SOC 2 evidence collection.
Benefits
Comp & perks- Equity
- 401k
- Health, Dental, and Vision insurance
- Spending accounts
- Life & Disability
- Paid parental leave
- Flexible paid time off
- Enhanced employee assistance program
- Employee wellness stipend
- Professional development stipend