Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Vanguard

Lead Cloud Security Engineer

Vanguard

. Lead technical design reviews and own standards for building, testing, and shipping controls .

Posted 10/16/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise-scale controls using AWS, CloudFormation, and Terraform, while mentoring engineering teams on best practices and technical standards. Proficient in automating security posture checks and integrating controls into CI/CD pipelines to enhance cloud security and compliance.

Highest-signal resume keywords
AWS ExpertiseInfrastructure-As-Code ExperienceCloudFormation ProficiencyPolicy-As-Code ImplementationTechnical Mentorship

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Python ProgrammingCloudFormationTerraformAWS IAM Policy MechanicsEvent-Driven RemediationCI/CD IntegrationPolicy Pipelines DesignTroubleshooting Complex IssuesAutomated Controls EngineeringSecurity Strategy Translation
Soft Skills
MentoringInfluencing Technical DirectionProblem SolvingCollaboration
Tools & Technologies
AWSGCPAzureCSPMCNAPP
Certifications & Qualifications
AWS Security SpecialtyProfessional-Level AWS Certification
Industry Keywords
Cloud SecurityRegulated EnvironmentsAudit RequirementsTechnical Design ReviewsPreventive Controls

Tech Stack

Tools & technologies
AWSAzureCloudGoogle Cloud PlatformPythonTerraform

About the role

Key responsibilities & impact
  • Lead technical design reviews and own standards for building, testing, and shipping controls
  • Train, mentor, and coach engineers and new crew on technology standards, best practices, and frameworks
  • Troubleshoot and resolve complex issues escalated from staff
  • Influence engineering patterns and technical direction across teams without direct authority
  • Design enterprise-scale policy pipelines, event-driven remediation, and API contracts
  • Evaluate and select tooling, frameworks, and integration patterns for controls and enterprise infrastructure
  • Build preventive and detective controls as code using CloudFormation and/or Terraform and Rego/OPA
  • Embed controls into CI/CD pipelines and runtime configuration checks
  • Decide whether controls should break builds or detect and alert
  • Automate posture checks, drift detection, and event-driven remediation
  • Engineer AWS organization-scale controls, including SCPs, RCPs, permission boundaries, resource/identity policies, and CI/CD guardrails
  • Operationalize CSPM/CNAPP findings into automated controls
  • Translate security strategy, audit requirements, and risk priorities into technical work
  • Measure control coverage and effectiveness
  • Support privileged access controls, cloud account governance, audit responses, remediation, on-call rotation, and special projects

Requirements

What you’ll need
  • Minimum of seven years related work experience
  • Four or more years in cloud or security engineering preferred
  • Production-grade coding experience in Python or equivalent
  • Heavy hands-on infrastructure-as-code experience, with CloudFormation day to day; Terraform a plus
  • Hands-on expertise in AWS, GCP, or Azure; AWS strongly preferred
  • Experience with org-wide account structures, landing zones, and cross-account security patterns at scale
  • Track record of leading complex technical delivery, setting standards, mentoring engineers, and influencing technical direction across teams without direct authority
  • Ability to reason about trust boundaries, least privilege, and blast radius
  • Experience with AWS IAM policy mechanics, including inline, customer-managed, permission boundaries, SCPs, RCPs, and resource/identity policies; depth is learnable on the job
  • Experience working with engineering teams on policy-as-code, CI/CD integrations, code repositories and pipelines, and cloud security tooling
  • Experience operating in regulated or audit-driven environments
  • Relevant certification such as AWS Security Specialty or Professional-level AWS certification is a plus, not required
  • Undergraduate degree in a related field or equivalent combination of training and experience
  • No visa sponsorship available

Benefits

Comp & perks
  • Hybrid working model enabling flexibility, in-person learning, collaboration, and connection
  • Learning and development opportunities
  • On-call rotation participation