Senior Cloud Security Engineer

Overview

We’re looking for an experienced Senior Cloud Security Engineer to join the Jotform team. This is an opportunity to make your mark on a cutting edge environment and advance our infrastructure security to the next level. This person will be the primary responsible for all aspects of infrastructure security, including developing security tooling to detect security issues, implementing best practices and creating/maintaining secure system baselines across a multi-cloud environment.

Responsibilities

• Designing, scaling, and deploying various cloud security controls and services across AWS and GCP using a combination of cloud platform native and open source tools and SIEM integration. Create actionable output for the SecOps team
• Design and build process automation solutions to ensure systems meet security benchmarks (e.g., CIS) and satisfy operational compliance requirements
• Demonstrate strong knowledge of NIST 800-53 security controls and apply that expertise to support FedRAMP/GovRAMP compliance efforts, translating requirements into effective and actionable security measures
• Build and maintain secure, hardened operating system images, primarily in Linux. Design and implement monitoring controls for Linux systems
• Analyze infrastructure security findings and vulnerabilities. Partner with DevOps and other teams to mitigate findings and create security solutions
• Recommend new security solutions and tooling as necessary to bring security posture to the next level
• Collaborate with other members of the Security Team on other tasks as required

Qualifications

• 5+ years of experience with infrastructure, with a heavy focus on cloud security. Proven expertise in either AWS or GCP required, utilizing infrastructure-as-code solutions such as Terraform is highly desirable
• 2+ years of hands-on automated script design, coding, debugging, and maintenance skills (using Bash & Python)
• A good practical knowledge of security technologies and wider business solutions including Firewalls, IDS/IPS, Identity and access management, SIEM, Data Loss Protection, BCP, network security in a cloud-first setting
• The ability to use a wide variety of technologies, including CI/CD tools, infrastructure automation, code repositories, and security vulnerability identification tools to support our cloud infrastructure
• Experience with infrastructure hardening standards, performing infrastructure as code scanning, vulnerability management and threat hunting
• Ability to work cross functionally across Developers, DevOps, and Engineering teams in a dynamic environment to promote/implement a strong security program
• Passionately strive towards automating everything
• Please note, for federal security requirements, this role requires US citizenship
• Base pay range: $120,000 USD to $180,000 USD per year. Exact compensation may vary based on skills, experience, and location
• 100% company paid extended health insurance
• GRSP with 4% company match
• Casual office environment
• High-growth environment with collaborative and unique team culture

Compensation and process

Base pay range is $120,000.00/yr - $180,000.00/yr. The exact compensation may vary based on skills, experience, and location. We’ll review applications and contact shortlisted candidates for a screening call. If you are selected, you’ll have a short screening call to get to know you better. We thank all applicants for their interest in joining Jotform.

Jotform is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

Jotform values your privacy. You can find more information regarding our applicant privacy notice here:

Applicants must be authorized to work lawfully in the United States. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Engineering and Information Technology
• Industries
• Software Development