Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

We are seeking a Security Engineer for our Cloud Security team to continuously secure the cloud environment that runs an autonomous fleet across commercial AWS and AWS GovCloud. You will build guardrails that enable teams to ship fast with security integrated from the start, design secure-by-default patterns, and prioritize security based on real attack paths.

Responsibilities

• Own continuous cloud security posture management (CSPM) across all cloud accounts, detecting misconfigurations and drift, and driving remediation.
• Map technical controls to government and commercial frameworks (CMMC, NIST SP 800-171, FedRAMP/IL baselines) and maintain audit-ready control evidence.
• Manage cloud vulnerability management at scale, identifying and prioritizing issues by attack path and exposure, and driving remediation.
• Utilize tooling such as Prowler and a CNAPP, and automate remediation where possible.
• Build reusable Terraform modules, Service Control Policies, permission boundaries, and policy-as-code to establish secure-by-default patterns.
• Replace manual security gates with automated, self-service guardrails.
• Design least-privilege IAM across accounts and workloads, identify privilege-escalation and cross-account trust paths, govern secrets management, and standardize encryption and key-management patterns.
• Build and tune cloud-native detections (CloudTrail, GuardDuty, Config, Security Hub) and automated remediation.
• Support the Security Operations team in investigating, triaging, and remediating cloud-related security incidents.
• Incorporate lessons learned from incidents into new guardrails and detections.

Requirements

• 3+ years of hands-on cloud security, infrastructure security, or DevSecOps experience, or an equivalent combination of experience and demonstrated ability.
• Depth in AWS security services and architecture (IAM, Organizations/SCPs, CloudTrail, Config, GuardDuty, Security Hub, KMS, VPC).
• Strong infrastructure-as-code (Terraform) and policy-as-code experience.
• Hands-on cloud vulnerability management and CSPM tooling (e.g., Prowler), with a track record of driving cloud findings to remediation.
• A track record of building guardrails or patterns that other teams adopted without friction.
• Proficiency in scripting for security automation.
• Ability to obtain and maintain a U.S. security clearance.

Skills

• AWS security services
• IAM
• Organizations/SCPs
• CloudTrail
• Config
• GuardDuty
• Security Hub
• KMS
• VPC
• Terraform
• Policy-as-code
• Cloud vulnerability management
• CSPM tooling
• Prowler
• Scripting for security automation

Location

• Remote

Work Type

• Full-time

Experience Level

• 3+ years

Benefits

• Medical Insurance (Saronic pays 100% of employee premium, 80% for dependents)
• Dental and Vision Insurance (Saronic pays 100% of employee premium for basic plan, 80% for dependents)
• Generous PTO and Holidays
• Paid parental leave
• Competitive Salary
• Performance-based bonuses
• 401(k) plan with company match
• Stock Options
• Life and Disability Insurance
• Discounted pet insurance with 24/7 Telehealth helpline
• Free lunch benefit
• Unlimited free drinks and snacks in the office

About the Company

• Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

Equal Opportunity

• Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.
• If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).