[Remote] Senior Cloud Security Engineer

Note: The job is a remote job and is open to candidates in USA. Benchmark Analytics is dedicated to transforming policing through data science and machine learning, providing an evidence-based early intervention system for law enforcement agencies. They are seeking a Senior Cloud Security Engineer to enhance platform reliability and security, integrating security practices into the engineering lifecycle and maintaining a secure AWS environment.ResponsibilitiesDesign, build, and maintain secure AWS infrastructure across standard and GovCloud environmentsOwn infrastructure-as-code (Terraform / OpenTofu) with a security-first mindsetManage IAM strategy, least-privilege access controls, and cloud security postureOwn application observability and monitoring — instrumentation, dashboards, and alerting across infrastructure and application layers so issues surface before customers doOperate and evolve our EKS-based platform including node lifecycle, workload isolation, and cluster securityImplement and maintain admission control, network policies, and runtime security toolingPartner with engineering teams on deployment patterns and container securityBuild and maintain secure, automated deployment pipelines (GitHub Actions)Integrate SAST, dependency scanning, secrets detection, and container image scanning into the SDLCDrive shift-left security practices across the engineering organizationMaintain and improve security controls aligned to CJIS Security Policy and SOC 2 Trust Services CriteriaTriage or resolve security alerts by working with engineering teams and/or committing code yourselfManage vulnerability management workflows, prioritization, and remediation trackingSupport audit preparation, evidence collection, and control documentationMonitor for threats and respond to security findings across cloud, application, and endpoint layersEnforce and maintain software supply chain security across the organizationServe as an on-call responder for infrastructure and security incidentsDrive post-incident reviews and own follow-up remediation itemsDevelop and refine runbooks, alerting, and on-call proceduresIdentify and implement automation opportunities that reduce manual operational toilContribute to AI-assisted operations initiatives, including agentic workflows and observability improvementsBuild and maintain an internal Agentic-based software factory platform to accelerate organization-wide agentic codingApply security controls to AI tooling and LLM-integrated systems as they are introducedBuild and maintain self-service infrastructure tooling that lets engineering teams ship securely without waiting on Infrastructure & Security teamsCreate paved-path templates, modules, and golden pipelines that make the secure path the easy pathImprove the developer experience by identifying problems and automating, improving, and accelerating developers’ workflows through custom internal platform solutionsProvide internal documentation, office hours, and enablement sessions to level up engineering teams on cloud, security, and platform best practicesSkills5–8 years of experience in DevOps, DevSecOps, SRE, Cloud Engineering, or Platform Engineering rolesStrong hands-on AWS cloud infrastructure experience: EC2, EKS, IAM, VPC, S3, and related servicesProduction Kubernetes experience including cluster operations and workload securityExperience building and maintaining CI/CD pipelines with integrated security toolingWorking knowledge of SOC 2 or similar compliance frameworks and their operational implicationsInfrastructure-as-code fluency with Terraform or OpenTofuStrong incident response skills: you've been in the hot seat and know how to stay calm and methodicalAble to receive and respond constructively to feedback, and collaborate well with team membersExcellent written communication: you can document a runbook, write a post-mortem, and explain a technical risk to a non-technical stakeholderBachelor's degree in Computer Science or equivalent professional experienceExperience with CJIS Security Policy or other criminal justice / government data frameworksAWS GovCloud experienceFamiliarity with agentic AI workflows or LLM security considerationsExperience with observability platforms (Datadog, OpenTelemetry, or similar)Contributions to security tooling, automation frameworks, or open-source projectsExperience working in an early-to-growth-stage startup environmentBenefitsUnlimited Paid Time Off.Ability to work in a fully remote environment (must be based in the U.S. and willing to work in Central Time Zone).Summer Half-Day Fridays.Freed Up Fridays during Spring, Fall, and Winter months to promote productivity and dedicated heads-down work time.Medical, dental, and vision plan offerings along with 401(k).Employer-paid Short-Term Disability, Long-Term Disability, and Life Insurance.Other Voluntary Benefits include additional Life Insurance, Spouse Life Insurance, and Accident Insurance.Company OverviewBenchmark Analytics provides police force management software driven by real-world experience and world class research. It was founded in 2017, and is headquartered in Chicago, Illinois, USA, with a workforce of 51-200 employees. Its website is https://www.benchmarkanalytics.com/.