Security Engineer, Cloud Security

About the role

Saronic Technologies is seeking a Security Engineer to lead the continuous security posture of its cloud environment that powers an autonomous maritime fleet. The role focuses on both commercial AWS and AWS GovCloud, building automated guardrails that enable fast, secure delivery of services.

Key responsibilities

• Own continuous cloud security posture management (CSPM) across all accounts, detect misconfigurations, and drive remediation.
• Map technical controls to government and commercial frameworks (CMMC, NIST SP 800‑171, FedRAMP/IL) and maintain audit‑ready evidence.
• Run cloud vulnerability management at scale, prioritize findings by real attack path, and automate remediation using tools such as Prowler and a CNAPP.
• Develop reusable Terraform modules, Service Control Policies, permission boundaries, and policy‑as‑code to enforce secure‑by‑default configurations.
• Design least‑privilege IAM, hunt privilege‑escalation paths, manage secrets, and standardize encryption and key‑management patterns.
• Build and tune cloud‑native detections (CloudTrail, GuardDuty, Config, Security Hub) and support the SOC in investigating and containing cloud‑related incidents.

Required profile

Required skills

• AWS (including GovCloud)
• Terraform
• Service Control Policies and permission boundaries
• Policy‑as‑code
• Prowler
• CNAPP platforms
• CloudTrail, GuardDuty, AWS Config, Security Hub
• IAM design and least‑privilege principles
• Secrets management, encryption, key‑management
• Knowledge of CMMC, NIST SP 800‑171, FedRAMP compliance frameworks