[All remote jobs](https://jobicy.com/jobs.md)[![ecosio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/eec17a98-221.png)](https://jobicy.com/company/ecosio.md)[ecosio](https://jobicy.com/company/ecosio.md)

# Senior Cloud Security Engineer (f/m/d)

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

[Apply for this job](#job-application)[View company](https://jobicy.com/company/ecosio.md)ShareRemote from[Austria](https://jobicy.com/job-region/austria.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished6 Oct 2026Apply before5 Nov 2026Listing views47Application actions1Application toolkit

## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

## The role, at a glance.

ecosio is seeking a senior cloud security engineer to improve the security posture of AWS, Kubernetes, infrastructure-as-code, and microservices environments. The role combines hands-on implementation of security tooling and controls with threat modeling, misconfiguration remediation, and security automation. It also supports audits, compliance initiatives, and certifications such as ISO 27001 and SOC 2 while partnering with engineering teams and the Security Chapter. Strong practical experience with AWS, Kubernetes, Terraform, GitLab CI, ArgoCD, and a scripting or programming language is central to success.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

5/5EasyHard

### Pace & Pressure

4/5RelaxedFast-paced

### Autonomy Level

4/5GuidedFull ownership

### Communication Load

4/5IndependentCollaborative

AI insightThis is a senior-level security engineering role requiring deep cloud-native expertise across AWS, Kubernetes, CI/CD, infrastructure automation, and compliance. The engineer must independently identify and mitigate security risks while translating security requirements for varied technical stakeholders.

## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job medianMarket rate$165,000US market range$140k–$195k0$215k

AI insightNo actual salary is disclosed, so these are estimated US-market annual base-salary figures in USD for a senior cloud security engineer. Actual compensation may differ substantially based on location, level calibration, company pay practices, and total-rewards structure.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[Kubernetes security](https://jobicy.com/jobs?search_keywords=Kubernetes%20security.md)[Cloud security engineering](https://jobicy.com/jobs?search_keywords=Cloud%20security%20engineering.md)[Threat modeling](https://jobicy.com/jobs?search_keywords=Threat%20modeling.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[GitLab CI](https://jobicy.com/jobs?search_keywords=GitLab%20CI.md)[ArgoCD](https://jobicy.com/jobs?search_keywords=ArgoCD.md)[Security automation](https://jobicy.com/jobs?search_keywords=Security%20automation.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)[SOC 2 compliance](https://jobicy.com/jobs?search_keywords=SOC%202%20compliance.md)

Sample interview questionsHow would you improve the security posture of an AWS-based Kubernetes platform?I would begin with an inventory and risk assessment covering IAM, network segmentation, logging, encryption, cluster access, workload identities, image provenance, and secrets management. I would prioritize high-impact controls such as least-privilege IAM, private endpoints where appropriate, admission controls, image scanning, runtime monitoring, centralized audit logs, and policy-as-code integrated into deployment pipelines.

Describe how you would embed security checks into a GitLab CI and Terraform workflow.

I would add automated checks at merge-request and deployment stages, including secret detection, dependency and container scanning, IaC scanning, policy validation, and Terraform plan review. Findings should have clear severity thresholds, block releases only for agreed critical risks, and create actionable remediation guidance so controls support delivery rather than becoming a manual bottleneck.

How do you approach threat modeling for a new microservice?

I define the system boundaries, assets, data flows, identities, trust boundaries, and external dependencies with the engineering team. I then identify likely threats using a structured method such as STRIDE, prioritize them by likelihood and impact, document mitigations, and convert the highest-value controls into design requirements and automated verification where possible.

What evidence would you prepare to support ISO 27001 or SOC 2 audits?

I would maintain evidence showing that controls are designed and operating effectively, such as access reviews, change-management records, vulnerability-management reports, security training records, incident-response exercises, logging configurations, backup tests, and policy attestations. I would automate evidence collection where practical and map each artifact to the relevant control requirements.

How would you explain a critical cloud misconfiguration to both engineers and non-technical stakeholders?

For engineers, I would provide the affected resource, attack path, risk severity, recommended configuration change, and validation steps. For non-technical stakeholders, I would summarize the business impact, likelihood, remediation timeline, ownership, and any residual risk in plain language without unnecessary implementation detail.

Opportunity details

## About this role.

### Company Description

ecosio is a fast-growing, innovative service company and a leading provider of B2B integration, specialising in electronic data interchange (EDI), Web EDI and e-invoicing. ecosio is part of Vertex, Inc., a leading global provider of indirect tax solutions listed on Nasdaq (VERX).

Our brand slogan is Connections That Work as we believe strong connections are central to successful business relationships – both external and internal. At ecosio, we hire individuals from all backgrounds and are committed to creating an inclusive work environment. We are technology lovers, set the highest standards for our solutions, and put innovative ideas first.

Job Description

You’ll connect with the role if you enjoy…

* Identifying, implementing, and integrating security tools and controls to strengthen AWS and Kubernetes security posture and support threat modelling
* Identifying and mitigating security issues and misconfigurations across infrastructure and microservices
* Supporting audits, compliance initiatives, and security certifications
* Collaborating with cross-functional teams and the Security Chapter to implement and maintain security standards
* Working with technologies such as:
Infrastructure: Kubernetes, AWS, ArgoCD, Helm, Terraform, HAProxy, GitLab CI
* Data storage and querying: MongoDB, Redis, Elasticsearch
* Monitoring and observability: Prometheus

Qualifications

To connect with ecosio it is important to have…

* Several years of experience as a Cloud Security Engineer, Security Engineer, or in a similar role
* Strong hands-on experience with cloud security, preferably in AWS environments
* Experience with at least one programming language such as Bash, Python, Go, Rust, or Java
* Experience with automation and infrastructure tools such as Docker, Kubernetes, GitLab CI, ArgoCD, and Terraform
* Up-to-date knowledge of modern cybersecurity threats, risk assessment techniques, security best practices, and compliance frameworks such as ISO 27001 and SOC 2
* Strong communication skills with the ability to explain concepts such as scalability, automation, and security to different audiences

Additional information

By connecting with us you will experience…

* Our remote-first culture lets you work remotely from one of our designated countries
* Flexible working hours to suit your schedule and priorities
* Annual personal development budget to invest in conferences, courses, or career coaching
* Home office allowance to create a workspace that fits your needs
* Regular events and trips to connect, celebrate, and have fun with the team
* Workations of up to 90 days per year within the EU, combining travel and productivity
* Wellbeing support, including mental health resources and employee assistance programs
* Additional country-specific benefits based on your location

Sounds like a connection that works? Then apply now and we will get in touch soon!

As part of our hiring process at ecosio, we conduct standard background checks. You can find more information about them by clicking [HERE](https://ecosio.com/en/background-check/).

Our mission is to build Connections That Work by fostering a diverse and inclusive team. We are committed to making everyone feel valued and empowered to contribute their unique skills, experiences and perspectives. And now we want to connect with you.

Show more

[Apply now >](https://jobicy.com/jobs/154752-senior-cloud-security-engineer-f-m-d.md)

>  Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

*
![Stripe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201011073943-272457.png)
Stripe Oct 6  New

### [ARG Engineering Manager](https://jobicy.com/jobs/154725-arg-engineering-manager.md)

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies – from the world’s largest enterprises to the most ambitious startups – use Stripe…

*
![Recorded Future, Inc. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/2467e1d2-221.png)
Recorded Future, Inc. Oct 6  New

### [EDR Engineer / Senior EDR Engineer](https://jobicy.com/jobs/154699-edr-engineer-senior-edr-engineer.md)

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company! The EDR Security Engineer is responsible for the technical administration,…

*
![Recorded Future, Inc. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/2467e1d2-221.png)
Recorded Future, Inc. Oct 6  New

### [Principal Dark Web Collection Analyst](https://jobicy.com/jobs/154704-principal-dark-web-collection-analyst.md)

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company! Recorded Future is expanding its dark web collection capability with…

*
![Abby Care logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/3d3ea8fe-221.jpeg)
Abby Care Oct 6  New

### [Senior Security Analyst](https://jobicy.com/jobs/154692-senior-security-analyst.md)

About Abby Care: Powering the future of care at home for all of America. Abby Care is building the leading AI-native platform for family-led care. America is facing a growing…

*
![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png)
Five9 Oct 6  New

### [Senior Information Security Engineer](https://jobicy.com/jobs/154681-senior-information-security-engineer.md)

Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values…

*
![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg)
Beyond Finance Oct 6  New

### [Senior Application Security Engineer](https://jobicy.com/jobs/154682-senior-application-security-engineer-3.md)

At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,…

*
![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png)
Five9 Oct 6  New

### [Cloud Governance Engineer](https://jobicy.com/jobs/154675-cloud-governance-engineer.md)

Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values…

*
![Collibra logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/25583c1c-221.jpg)
Collibra Oct 5  New

### [Engineer, Security Operations & Engineering](https://jobicy.com/jobs/154592-engineer-security-operations-engineering.md)

Joining Collibra’s Security Operations & Engineering team This is an opportunity to work in the Security Operations & Engineering team within the growing Collibra Security Organization.Security Engineers at Collibra design,…

*
![HackerOne logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8937d355-221.png)
HackerOne Oct 5  New

### [Senior Director, Community](https://jobicy.com/jobs/152527-senior-director-community.md)

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to…

*
![HackerOne logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8937d355-221.png)
HackerOne Oct 5  New

### [Product Security Analyst](https://jobicy.com/jobs/152523-product-security-analyst.md)

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to…

[Browse all jobs](https://jobicy.com/jobs.md)