Security-Engineer, Cloud-Security-Engineer, DevSecOps-Engineer Jobs

What You’ll Do

The Security Engineer reports to the Information Security Manager and works closely with Security, DevOps, Engineering, IT, and Compliance teams to design, build, operate, and continuously improve the technical controls that protect iSeatz systems, applications, and data. This is a hands-on engineering role focused on secure AWS environments, automation, detection and response capabilities, and practical risk reduction across a cloud-native platform.

In this role, you will translate security requirements into durable technical solutions, help engineering teams ship securely, and improve the visibility and resilience of the services our customers depend on.

Your Impact

• Engineer and maintain security controls across AWS accounts and services, including identity, logging, monitoring, network security, encryption, and configuration assurance.
• Develop, review, and improve Infrastructure as Code for security controls and cloud infrastructure. Work within existing IaC workflows and help make secure patterns repeatable for engineering teams.
• Operate and improve the SIEM, including log source onboarding, detection content, alert tuning, investigation support, dashboards, and use cases aligned to real threats and business risk.
• Administer and strengthen identity and access management controls across the identity provider, cloud environments, and critical SaaS platforms, including SSO, MFA, lifecycle automation, privileged access, and access reviews.
• Maintain and enhance intrusion detection and prevention capabilities across cloud, endpoint, and network environments. Investigate meaningful detections and partner on containment and remediation.
• Own key portions of the vulnerability management lifecycle: asset coverage, scanning, validation, prioritization, remediation tracking, exception support, and executive or technical reporting.
• Partner with Engineering and DevOps to secure CI/CD pipelines, application dependencies, secrets, container images, Kubernetes or ECS workloads, and runtime environments.
• Build security automation, integrations, and tooling using scripting and APIs to reduce manual effort, improve evidence quality, and increase response speed.
• Support security incident response by conducting technical investigation, collecting evidence, coordinating remediation, and improving controls after incidents and exercises.
• Perform technical security reviews of infrastructure, architecture, applications, and configuration changes. Document findings, recommendations, standards, and operational runbooks clearly.
• Stay current on cloud threats, attack techniques, and defensive capabilities, then apply that knowledge in ways that improve iSeatz security without creating unnecessary friction.

What You Bring to the Table

• 3+ years of hands-on experience in security engineering, cloud engineering, systems engineering, DevSecOps, or a closely related technical role.
• Hands-on experience securing AWS environments, with a working understanding of core AWS security services and multi-account or multi-environment operations.
• Professional experience using Infrastructure as Code to build or manage cloud infrastructure and security controls.
• Hands-on experience with a SIEM or cloud security analytics platform, including log analysis, detection engineering or alert tuning, investigation workflows, and reporting.
• Hands-on experience with an identity provider and identity security controls, such as SSO, MFA, SCIM or lifecycle management, access governance, and privileged access.
• Experience operating or supporting IDS, IPS, EDR, NDR, WAF, or comparable detection and prevention technologies, with a strong grasp of network security fundamentals.
• Experience with vulnerability management tools and processes, including scanning, asset inventory, prioritization, remediation tracking, validation, and risk-based communication.
• Working knowledge of containerization and cloud-native workload security, including Docker, container registries, image scanning, and orchestrated workloads such as Kubernetes, ECS, or EKS.
• Ability to automate tasks and integrate tools using Python, Bash, PowerShell, JavaScript or TypeScript, APIs, and version-controlled workflows.
• Strong analytical, troubleshooting, and communication skills. You can work across technical and nontechnical teams, explain risk plainly, and move work from finding to resolution.
• Ability to work independently while collaborating effectively across Security, Engineering, DevOps, IT, and Compliance.

Bonus Points

• Hands-on AWS CDK experience, especially building reusable security guardrails and secure-by-default patterns in TypeScript or Python.
• Deep penetration testing experience across web applications, APIs, cloud environments, internal networks, or adversary simulation, including the ability to validate remediation and explain practical exploit paths.
• Experience securing Kubernetes or EKS at scale, including admission controls, workload identity, network policies, secrets management, runtime detection, and image supply chain security.
• Experience with security automation, SOAR, case management, or custom integrations that enrich, prioritize, or respond to alerts.
• Experience in a PCI DSS, SOC 2, or other regulated environment, including translating control requirements into technical evidence and sustainable engineering practices.
• Experience with application security tools and practices, including SAST, DAST, SCA, secrets scanning, threat modeling, or secure code review.
• Relevant security or cloud certifications such as AWS Certified Security Specialty, CISSP, CCSP, GIAC.

Originally posted on Himalayas

We are looking for a Senior Security Engineer to scale and mature our Cloud, Container, and Edge Security programs. In this role, you will move beyond passive scanning to actively engineer guardrails, automate threat detection, and build automated enforcement gates into our CI/CD pipelines and infrastructure. You will partner closely with Engineering, Infrastructure, and Application Security teams to ensure our cloud environments, containerized workloads, and edge boundaries remain resilient and secure by default.

What you’ll do:

• Define, drive, and execute the long-term technical roadmap for Cloud, Container, and Edge Protection programs.
• Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation).
• Perform security-focused infrastructure reviews for new product releases and architectural changes.
• Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations.
• Own container image security — vulnerability scanning and remediation at the base image layer, and building the gating needed to keep unpatched or non-compliant images out of production.
• Collaborate with Infrastructure and Engineering teams to embed security into CI/CD pipelines and deployment processes without slowing down delivery.
• Partner with Application Security and Engineering to implement security controls on opportunities identified during Threat Modeling.
• Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening.
• Identify security control gaps across cloud, container, and network infrastructure, and drive them to resolution — proposing the fix and staging the implementation (e.g., a Terraform PR) for Infrastructure to review and approve.
• Assist with threat modeling, risk assessments, and provide security guidance during the development lifecycle.
• Collaborate with incident response teams, offering expert advice on cloud-related security issues to help resolve incidents quickly.
• Develop tooling or automation to support proactive remediation and continuous security validation.
• Track and report DevSecOps KPIs, such as mean time to remediate, security control coverage, and vulnerability trends.
• Mentor engineers across the security org and set technical standards for how the team approaches cloud and container security.

What you have:

• 5+ years in DevSecOps, Security Engineering, or similar roles.
• Experience owning a security program or initiative end-to-end, from roadmap to execution, including influencing engineering teams outside your reporting line.
• Expertise with cloud platforms (GCP, AWS, Azure) and container orchestration (e.g., Kubernetes, ECS).
• Experience with cloud and container security tooling.
• Strong understanding of WAFs, bot mitigation, API gateways, and CDN security features.
• Proven experience performing secure design and architecture reviews.
• Proficiency with IaC tools (Terraform, OpenTofu, Helm, etc.) and integrating security scanners into pipelines.

What makes you stand out:

• Extensive hands-on experience with Terraform, OpenTofu, and/or Crossplane.
• Experience with CrowdStrike.
• Solid understanding of networking principles (e.g., VPCs, load balancing, firewalls) in a cloud environment.
• Knowledge of database management (SQL and NoSQL).
• Relevant certifications (e.g., Kubernetes and Cloud Native Security Associate, Certified Kubernetes Security Specialist, Google Professional Cloud Security Engineer, AWS Certified DevOps Engineer, AWS Certified Security - Specialty, Certified Kubernetes Administrator).

Where you’ll live:

• While we prefer candidates based in Atlanta, we are open to qualified applicants from anywhere in the U.S. and are willing to consider remote candidates.

Working at PrizePicks:

The typical salary range for this position is $160,000 to $175,000. At PrizePicks, we consider your role, level, and where you'll be working when determining our salary ranges. The compensation info you see on our job postings gives you an idea of the starting pay range for the position. Your actual pay within that range will depend on your specific work location, as well as your skills, experience, and education. Your recruiter will be happy to chat more about the specific pay range for your location and how we arrived at it during the hiring process.

This application period will remain open for 30 days. We’re committed to finding the best candidate, so this date may be adjusted, and any changes will be reflected in this posting.

Date Posted: 9/14/26

Reposted: 10/14/26

Originally posted on Himalayas