voltus - Security Engineer

Remote - Asia-Pacific *2mo ago

Remote Mid NA Cloud Computing Software Security Engineer AWS Python Go Terraform Docker

Requirements

• 4–7 years of security engineering experience, ideally at a SaaS or remote-first company. • Software development experience with Go or Python. • Proven AWS Security Experience (IAM, KMS, VPC, CloudTrail, GuardDuty). • Direct experience supporting a SOC 2 Type 2 audit cycle. • Familiarity with compliance requirements such as ISO 27001, HIPAA, and GDPR. • Experience with IaC tools like Terraform and containers such as Docker. • Proficiency with monitoring and observability tools like Datadog or Prometheus. • Strong focus on risk awareness and knowing when to make fast versus slow decisions. • Security certifications such as CISSP, AWS Security Specialty, or GIAC are a plus. • Please note that at this time, we do not sponsor visas or transfers for new hires. Voltus teammates need to be authorized to work from their home location (in the US or Canada, unless otherwise indicated on the role description). • Additionally, while Voltus is an all-remote workplace, we have limitations on where employees are able to work for regulatory and security reasons. We expect that Voltans are working primarily from their home country. Working while traveling to other countries must be approved as per our Global Remote Travel Policy.

Responsibilities

• Engineering and Operations • Build detections and security signal pipelines in Datadog. • Serve as the subject matter expert on AWS Cloud and on-prem infrastructure security. • Define and set up AWS and on-prem Security Monitoring/Best Practices Strategy. • Act as the technical lead during security incidents, including investigation and remediation. • Improve Terraform Modules and Infrastructure as Code (IaC) to follow security best practices. • Develop and implement a vulnerability monitoring strategy and integrate it into CI/CD pipelines. • Build security automation using Python, scripting, and APIs. • Partner with Infrastructure on AWS security engineering, including IAM, KMS, and network segmentation. • Governance, Risk, and Compliance • Operate SOC 2 Type 2 evidence collection and audit response. • Drive ISO 27001 implementation work, including risk assessments and control mapping. • Ensure infrastructure compliance with regulatory requirements. • Run vendor and subprocessor risk reviews. • Respond to customer security questionnaires and external inquiries. • Mentor and enable other team members to improve their security posture.