Hex
Cloud Security Engineer
SF, NYC, or Remote (US)
Sponsorship not specified$200k-$265kDetected 15 days ago
TypeScriptPythonReactReduxExpressPostgreSQLRedisAWSCloud PlatformsKubernetesTerraformHelmCI/CDGraphQLCybersecuritySIEMComplianceFirewallHIPAALeadershipCommunicationCollaborationProblem Solving
About the role
- We are looking for an experienced Cloud Security Engineer to join Hex's security team.
- You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
Responsibilities
- Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex's RCE-as-a-Service platform
- Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
- Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
- Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
Requirements
- 5+ years of experience in cloud security engineering, with extensive expertise in AWS.
- Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
- Expert-level knowledge and hands-on experience with Terraform.
- Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
- Familiarity with CNAPP solutions such as Wiz
- Familiarity with SIEM solutions such as Panther
Skills
- https://learn.hex.tech/docs/trust/privacy-policy.
- No application is automatically rejected based solely on an AI tool's output.
- Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
- Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
- Mentor engineers and advocate for cloud security across the organization.
- Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
- Excellent problem-solving, communication, and leadership skills.
Compensation
- The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we're open to.
- Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience.
- $200,000 - $265,000
Benefits
- Bonus points for security certifications from SANS or OffSec.
- In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
This listing is sourced directly from Hex's careers page and normalized into a canonical job model.