Our client is an IT company seeking an experienced Cloud and Infrastructure Security Engineer to assess and strengthen the security posture of a complex, multi-cloud infrastructure.
The client is building a dedicated security team for a US-based SaaS provider whose platform serves hundreds of public-sector agencies across North America. The programme covers a large, varied estate of around a dozen product lines, running on Java, .NET, Node/TypeScript, Ruby and PHP across Azure and AWS, including legacy systems that need framework upgrades rather than quick patches. The work starts with a short phase where senior engineers do threat modelling and map the estate. A larger team then fixes vulnerabilities, hardens cloud infrastructure, builds security gates into CI/CD pipelines and consolidates identity services. Engineers work hands-on with modern AI coding tools and learn security from experienced tower leads. It’s a strong fit for good software, cloud and DevOps engineers who want to grow into application security. The team works in English, with partial overlap with US Eastern time.
The Project
The project focuses on mapping the existing infrastructure attack surface, identifying security vulnerabilities and configuration gaps, and establishing a prioritized remediation roadmap.
The engineer will work alongside other senior security specialists responsible for application security assessments, focusing specifically on cloud, edge, network, and virtual machine infrastructure.
