# Staff Cloud Security Engineer **Company:** [Assured](https://scaleengineer.com/companies/assured) Assured is seeking a Staff Cloud Security Engineer to strengthen their cloud infrastructure and security posture. The ideal candidate will design resilient AWS environments, drive security automation, and implement comprehensive cloud security strategies that balance innovation with compliance across the company's insurance technology platform. **Role:** Cloud Security Engineer **Seniority:** Staff **Locations:** Remote **Remote:** yes **Salary:** 190000–220000 USD [Apply](https://jobs.ashbyhq.com/assured/5ccbd953-c55a-4de6-899c-e21d76c37ad1) Canonical: https://scaleengineer.com/jobs/assured/staff-cloud-security-engineer --- ## Responsibilities - Cloud Environment Design: Design, implement, and scale secure AWS environments that balance technological innovation with compliance requirements - Infrastructure Automation: Build and maintain Terraform modules and infrastructure-as-code pipelines to ensure consistent, auditable, and secure deployments - Security Assessments: Conduct regular security assessments, perform vulnerability testing, and lead incident response efforts - Security Integration: Collaborate with engineering and DevOps teams to integrate security controls into CI/CD workflows and product lifecycles - Security Strategy: Define and implement comprehensive security strategies including IAM, network segmentation, encryption standards, and continuous monitoring practices - Threat Detection: Detect security anomalies, investigate alerts, and respond to evolving threats across cloud ecosystems - Knowledge Sharing: Guide peers on secure design principles, share knowledge about emerging risks, and promote cloud security best practices ## Requirements ### education - {"name":"Degree","description":"Bachelor's degree in Computer Science, Cybersecurity, or related technical field preferred"} ### technical - {"name":"Cloud Platform","description":"Extensive experience with AWS cloud security engineering"} - {"name":"Infrastructure as Code","description":"Mastery of Terraform and infrastructure-as-code principles"} - {"name":"Security Controls","description":"Expertise in IAM, encryption, network security, and comprehensive logging/monitoring practices"} ### experience - {"name":"Professional Experience","description":"Minimum 5-7 years of hands-on cloud security engineering experience"} - {"name":"Leadership","description":"Demonstrated ability to lead security initiatives and guide technical teams"} ## Skills ### required - {"name":"AWS Cloud Security","description":"Deep expertise in securing AWS cloud environments and implementing robust security controls"} - {"name":"Terraform","description":"Proficiency in infrastructure-as-code and creating secure, repeatable infrastructure deployments"} - {"name":"IAM","description":"Advanced knowledge of Identity and Access Management strategies and implementation"} - {"name":"Network Security","description":"Comprehensive understanding of network segmentation and security protocols"} - {"name":"Scripting","description":"Strong scripting skills in Python, Bash, PowerShell, or TypeScript for security automation"} ### preferred - {"name":"Container Security","description":"Experience with Kubernetes, EKS, and container security platforms"} - {"name":"Compliance Frameworks","description":"Knowledge of SOC 2, ISO 27001, GDPR, or HIPAA compliance standards"} - {"name":"Security Certifications","description":"Professional certifications like AWS Certified Security, CISSP, or GIAC Cloud Security"} ## Tech stack ### tools - {"name":"Terraform","description":"Infrastructure as Code deployment and management"} - {"name":"AWS Security Services","description":"GuardDuty, Security Hub, Detective, WAF, CloudTrail"} ### others - {"name":"Container Security","description":"Docker, Kubernetes, EKS security tools"} - {"name":"SIEM Platforms","description":"Security information and event management systems"} ### databases ### languages - {"name":"Python","description":"Primary scripting and automation language"} - {"name":"Bash","description":"Shell scripting for security and infrastructure automation"} - {"name":"PowerShell","description":"Windows system and security scripting"} - {"name":"TypeScript","description":"Advanced scripting and potentially frontend security work"} ### frameworks - {"name":"Zero Trust","description":"Modern identity and access management framework"} ## Benefits ### benefits - {"name":"Healthcare","description":"Platinum medical, dental, and vision coverage"} - {"name":"Life Insurance","description":"Complimentary life, long-term, and short-term disability insurance"} - {"name":"Retirement","description":"401(k) with 3% company contribution"} - {"name":"Paid Time Off","description":"Unlimited PTO with paid holidays"} - {"name":"Family Benefits","description":"Maternity and paternity leave"} - {"name":"Remote Work","description":"Work from home with monthly phone stipend and office perks"} - {"name":"Flexible Spending","description":"Health FSAs and HSAs for pre-tax medical expenses"} ## Compensation - **max:** 0 - **min:** 0 - **currency:** - **stockOptions:** false ## Interview process ### steps - {"name":"Initial Screening","description":"Review of resume and initial qualifications"} - {"name":"Technical Phone Screen","description":"Detailed discussion of cloud security experience and technical capabilities"} - {"name":"Technical Interview","description":"In-depth evaluation of cloud security engineering skills, infrastructure design, and security strategy"} - {"name":"Leadership Interview","description":"Assessment of communication skills, strategic thinking, and team collaboration potential"} - {"name":"Final Interview","description":"Meeting with senior leadership and potential team members"} ## Full description Assured is on a mission to modernize insurance. Claims processing (i.e. should we pay this claim?), while often overlooked, is the foundation of the entire industry. It’s currently highly manual, involving phone calls, faxes, and gut instinct, costing tens of billions of dollars a year. We can do better. At Assured, we provide large insurers with the software solutions they need to win in a modern, technology-driven world. From self-service claim-filing software to backend fraud detection, we’re the engine that powers claims processing for some of the largest insurers in the world. The challenges we face are deep and diverse, from creating digital experiences that provide comfort and clarity to claimants at their most stressed and vulnerable to orchestrating large-scale ML-driven decision-making on billions of dollars of claims payments, life at Assured is dynamic, collaborative, and rewarding. Join us as a **Staff Cloud Security Engineer** and play a pivotal role in securing and scaling the cloud foundation that powers everything we do. You’ll design resilient architectures, drive automation, and champion security-by-design across our platform. Your work will help protect our data, earn customer trust, and strengthen our compliance posture as we grow. ## What You’ll Do 🔒 Design, implement, and scale secure AWS environments that balance innovation and compliance. ⚙️ Build and maintain Terraform modules and infrastructure-as-code pipelines to ensure consistent, auditable, and secure deployments. 🕵️ Lead regular security assessments, perform vulnerability testing, and drive incident response efforts. 🤝 Collaborate with engineering and DevOps teams to integrate security controls into CI/CD workflows and product lifecycles. 📏 Define IAM strategies, implement network segmentation, apply encryption standards, and establish continuous monitoring practices. 📡 Detect anomalies, investigate alerts, and respond to evolving threats across our cloud ecosystems. 👩‍🏫 Guide peers on secure design, share knowledge of emerging risks, and promote cloud security best practices. 🚀 Stay ahead of emerging threats and tools while shaping our long-term security strategy with creativity and foresight. ## What You Bring ☁️ Deep experience in cloud security engineering with a strong focus on AWS. 🛠️ Mastery of Terraform and infrastructure-as-code principles. 🔑 Expertise in IAM, encryption, network security, and logging/monitoring best practices. 🧰 Hands-on experience with endpoint protection (EDR, MDM, antivirus, etc.). 🧾 Understanding of compliance frameworks such as SOC 2, ISO 27001, GDPR, or HIPAA. 💻 Strong scripting and automation skills (Python, Bash, PowerShell, or TypeScript). 💬 Excellent communication and problem-solving abilities across technical and non-technical teams. ## Bonus Points **🎓** Certifications like AWS Certified Security – Specialty, CISSP, or GIAC Cloud Security Essentials (GCLD). 🧠 Familiarity with AWS security services such as GuardDuty, Security Hub, Detective, WAF, CloudTrail, or SIEM platforms. 📦 Experience with container and Kubernetes security (EKS, Docker, Aqua Security). 🔐 Understanding of Zero Trust architectures and modern identity strategies. **Benefits:** 🤑 Competitive Compensation: Competitive salary and equity packages for all employees 🏥 Healthcare Plan: Platinum medical, dental, and vision 🛡️ Free life insurance: Including long-term disability & short-term disability 🏄 Unlimited PTO: Uncapped vacation days & paid holidays 👶 Family Leave: Maternity & paternity 📈 401(k) Contribution: Assured contributes 3% of your income, even if you don't contribute 🏠 WFH Benefits: Lunch on us 2x/week, monthly phone stipend & other home office perks 👪 Health FSAs & HSAs: Pre-tax accounts for out-of-pocket medical expenses 🤝 Team events & Offsites: We're remote, but we regularly get together **\*\*We have been made aware of individuals falsely posing as recruiters from Assured Insurance Technologies Inc. Please note that we only contact candidates from official @**[**assured.claims**](http://assured.claims) **email addresses and all interviews are conducted through verified company channels. If you are unsure whether a message is legitimate, please contact us directly at recruiting-ops@assured.claims before sharing any personal information**\*\* **Our Commitment:** _We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request accommodation._