[All remote jobs](https://jobicy.com/jobs.md)[![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg)](https://jobicy.com/company/beyond-finance.md)[Beyond Finance](https://jobicy.com/company/beyond-finance.md) # Senior Cloud Security Engineer Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/beyond-finance.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 140k–165k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished14 Oct 2026Apply before13 Nov 2026Listing views81Application actions6Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Beyond Finance is seeking a senior cloud security engineer to strengthen AWS security posture and secure the software delivery lifecycle. The role centers on Wiz-based cloud security, vulnerability management, Terraform guardrails, CI/CD hardening, and WAF operations. This engineer will partner closely with DevOps and application engineering to prioritize remediation and build scalable developer-facing security automation. The position requires independent technical leadership across cloud, identity, container, network, secrets, and application-security concerns. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a senior, hands-on security engineering role spanning multiple high-impact domains, including AWS, IaC, CI/CD, WAF, vulnerability management, and application security. The engineer is expected to independently drive risk-reduction initiatives while influencing engineering and DevOps partners. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$152,500US market range (per year)$135k–$180k0$198.00k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer explicitly discloses a base annual salary range of $140,000–$165,000 USD, with a midpoint of $152,500 per year. This is a credible range for a senior cloud security engineering role in the US market. Estimated US market compensation for comparable roles is approximately $135,000–$180,000 annually, excluding bonus and other incentives. ## Core skills Skills and capabilities most closely associated with this opportunity. [AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[Wiz](https://jobicy.com/jobs?search_keywords=Wiz.md)[Vulnerability management](https://jobicy.com/jobs?search_keywords=Vulnerability%20management.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[Infrastructure as Code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[IAM](https://jobicy.com/jobs?search_keywords=IAM.md)[Container security](https://jobicy.com/jobs?search_keywords=Container%20security.md)[Web application firewall](https://jobicy.com/jobs?search_keywords=Web%20application%20firewall.md)[Threat modeling](https://jobicy.com/jobs?search_keywords=Threat%20modeling.md)[OWASP Top 10](https://jobicy.com/jobs?search_keywords=OWASP%20Top%2010.md)[Security automation](https://jobicy.com/jobs?search_keywords=Security%20automation.md)[Secrets management](https://jobicy.com/jobs?search_keywords=Secrets%20management.md) Sample interview questionsHow would you use Wiz and AWS-native capabilities to improve cloud security posture across a large AWS environment?I would first establish asset inventory and ownership, then prioritize findings based on exploitability, exposure, data sensitivity, and business criticality. I would use Wiz for contextual risk visibility while implementing durable AWS and IaC guardrails for IAM, networking, logging, encryption, container workloads, and secrets. Success would be measured through reduced critical exposure, remediation SLA performance, and fewer recurring misconfigurations. Describe how you would establish secure defaults in Terraform modules and policy as code. I would identify common infrastructure patterns and create reusable modules with secure configurations enabled by default, such as encryption, private networking, least-privilege IAM, centralized logging, and secure security-group rules. I would pair these modules with policy-as-code checks in pull requests and deployment pipelines. Exceptions would be time-bound, documented, and reviewed so teams can move forward without normalizing risk. How do you prioritize vulnerability remediation when engineering teams have many cloud and application findings? I prioritize based on real-world risk rather than CVSS alone: internet exposure, exploit availability, privilege level, affected asset criticality, sensitive-data access, and compensating controls. I group duplicate findings into remediation campaigns and define clear ownership and SLAs. I also provide developers with actionable remediation guidance and track aging exceptions to ensure risk is consciously managed. What is your approach to operating and tuning a production WAF? I start with visibility and baseline traffic analysis before enforcing new controls broadly. I use managed rules, targeted custom rules, rate limiting, and bot protections, while monitoring false positives and maintaining an expedited process for legitimate traffic that is blocked. Following attacks or bypasses, I conduct a review, update rules and runbooks, and look for upstream application or architectural fixes rather than relying only on the WAF. How would you secure CI/CD pipelines without creating excessive friction for developers? I would embed automated controls early in the development workflow, including secret scanning, dependency and code scanning, IaC checks, artifact integrity controls, and least-privilege build identities. Findings should be prioritized and presented with clear remediation paths rather than creating unmanageable alert volume. I would collaborate with engineering teams on phased enforcement, metrics, and documented exception paths to ensure controls are both effective and usable. Opportunity details ## About this role. At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we’ve helped over 1 million clients on their path to a brighter future. While we’re proud of what we’ve already accomplished, we’re searching for new collaborators to help us get to the next level! If you’re looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. ### The Role As a Senior Security Engineer, you’ll harden the security posture of our AWS environment and our software development pipeline. Cloud Security and vulnerability management in Wiz are the primary focus. You’ll partner with DevOps, Engineering, and our Application Security Engineer to build preventative controls across infrastructure, identity, and CI/CD. The work is hands-on: configuring tooling, reviewing architecture, hardening pipelines, and supporting application security work where your range is needed. ### Key Responsibilities * Own cloud security posture across our AWS environment using Wiz and AWS-native services, reducing risk across IAM, network segmentation, container security, secrets, and data exposure. * Establish secure defaults in our Infrastructure as Code through reusable modules, guardrails, and policy as code. * Harden CI/CD pipelines in partnership with DevOps. * Run vulnerability management across cloud and application findings: intake, prioritization, SLA tracking, and remediation with engineering. * Build automation that scales the program: ingestion, deduplication, prioritization, and developer-facing workflows. * Instrument telemetry, alerting, and runbooks for the systems you own. * Operate and tune our WAF: managed and custom rules, rate limiting, and bot mitigation. ### Requirements * 5+ years of hands-on security engineering across cloud security and vulnerability management. * Strong AWS security background: IAM, networking, container orchestration, and logging and audit. * Hands-on experience securing CI/CD pipelines and Infrastructure as Code; Terraform required. * Experience running or substantially contributing to a vulnerability management program. * Working knowledge of OWASP Top 10 and threat modeling. * Operates independently and drives projects without day-to-day oversight. ### Nice to Have * Experience with our stack: Wiz, Cloudflare (WAF, Gateway, Zero Trust), GitHub Advanced Security, Spacelift, and AWS-native services. * Hands-on WAF experience in production: writing and tuning rules, managing false positives, responding when something gets through. * AI/ML security exposure: prompt injection, data poisoning, model abuse, and the controls that mitigate them. * Secrets management platforms (AWS Secrets Manager, Keeper, Infisical). * Identity security across human and non-human identities. * PCI-regulated or financial services environment. * Familiarity with Ruby on Rails, Python, or Go. ### The Ideal Candidate The ideal candidate measures success by reduced risk, not tickets closed, and reaches for secure design and simplicity before another control. They think like an attacker but bring a developer mindset to their partnership with engineering, connecting the dots across cloud, identity, and pipeline rather than treating each as a separate domain. Engineers trust their technical judgment, and when something is blocked, they come with a proposed path forward. #LI-LB2 The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus. Base Salary Range $140,000—$165,000 USD Why Join Us? While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer: * Considerable employer contributions for health, dental, and vision programs * Generous PTO, paid holidays, and paid parental leave * 401(k) matching program * Merit advancement opportunities * Career development & training And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization. Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team. Show more [Apply now >](https://jobicy.com/jobs/155257-senior-cloud-security-engineer.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg) Beyond Finance Oct 14 New ### [Staff Security Engineer](https://jobicy.com/jobs/155261-staff-security-engineer.md) At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,… * ![BetterHelp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/0b48fde8-221.jpeg) BetterHelp Oct 14 New ### [Head of Security Engineering](https://jobicy.com/jobs/153174-head-of-security-engineering.md) Who are we and why should you join us? BetterHelp is on a mission to remove the traditional barriers to therapy and make mental health care more accessible to everyone…. * ![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png) Zscaler Oct 13 New ### [Senior Detection Analyst](https://jobicy.com/jobs/155194-senior-detection-analyst.md) Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 13 New ### [Detection & Response Engineer](https://jobicy.com/jobs/155169-detection-response-engineer.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 13 New ### [Detection & Response Lead](https://jobicy.com/jobs/155171-detection-response-lead.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Oct 13 New ### [Manager, Security Incident Response](https://jobicy.com/jobs/153123-manager-security-incident-response.md) 1Password is growing. We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![Rithum logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/fe3986d8-221-1.jpeg) Rithum Oct 13 New ### [Staff Information Security Engineer – AI First](https://jobicy.com/jobs/153112-staff-information-security-engineer-ai-first.md) Rithum™ is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers,… * ![Sporty Group logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8e6c246a-221.png) Sporty Group Oct 13 New ### [Offensive Security Engineer](https://jobicy.com/jobs/149060-offensive-security-engineer.md) About the roleMission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. The… * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Oct 13 New ### [Security Engineer, Detection & Response](https://jobicy.com/jobs/153102-security-engineer-detection-response.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 12 New ### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… [Browse all jobs](https://jobicy.com/jobs.md)