INTL
WWR
전문가
외주
원격 가능
Hex Technologies: Cloud Security Engineer
예상 기간
정규직(장기)
난이도
전문가
기술 스택
AWS
Kubernetes
Terraform
Helm
GuardDuty
Wiz
Panther
CI/CD
AI 분석 요약 기회점수 82/100
Hex Technologies의 보안팀에 합류하여 AWS와 Kubernetes 기반 클라우드 인프라의 보안과 복원력을 책임지는 Cloud Security Engineer 포지션입니다. Terraform 기반 IaC 보안 표준 적용, 위협 모델링과 보안 감사, CI/CD 파이프라인에 DevSecOps 내재화, 클라우드 보안 사고 대응 및 SOC 2·ISO 27001 등 컴플라이언스 대응을 수행합니다. AWS 보안과 Kubernetes 하드닝에 깊은 전문성을 갖춘 5년 이상 경력의 시니어 클라우드 보안 엔지니어에게 적합합니다.
핵심 요구사항
- 5년 이상 클라우드 보안 엔지니어링 경력 및 AWS 심화 전문성
- Kubernetes 보안(클러스터 하드닝, RBAC, 네트워크 정책, 컨테이너 취약점 관리)
- Terraform 전문가 수준의 실무 경험
- AWS 보안 서비스(IAM, GuardDuty, Security Hub, CloudTrail, WAF) 활용
- DevSecOps 및 CI/CD 보안, 보안 SDLC 이해
- SOC 2/ISO 27001/GDPR/HIPAA/PCI DSS 등 컴플라이언스 지식
산출물
- AWS·Kubernetes 보안 솔루션 및 제어 체계 설계·구현
- Terraform 기반 보안 강화 IaC
- 보안 평가·위협 모델링·감사 보고서
- 클라우드 보안 사고 대응 및 개선안
매력 포인트
- 고단가 ($198,750~$295,000)
- 원격 근무 가능(US)
- 명확한 기술스택과 역할 정의
프로젝트 유형장기계약
적합 개발자5년차 이상 시니어 클라우드 보안 엔지니어 (AWS + Kubernetes + Terraform)
프로젝트 원문 설명
Headquarters: SF, NYC, or Remote (US)
About the role
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
About the role:
- Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
- Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
- Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
- Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
- Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
- Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
- Mentor engineers and advocate for cloud security across the organization.
About you:
- 5+ years of experience in cloud security engineering, with extensive expertise in AWS.
- Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
- Expert-level knowledge and hands-on experience with Terraform.
- Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
- Familiarity with CNAPP solutions such as Wiz
- Familiarity with SIEM solutions such as Panther
- Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
- Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
- Bonus points for security certifications from SANS or OffSec.
- Excellent problem-solving, communication, and leadership skills.
Our Engineering team
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
- How we took down production…
- Beyond Linear Notebooks
- A pragmatic approach to live collaboration
Our stack
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
The salary range for this role is: $198,750 - $295,000
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
Hex Technologies uses AI-assisted tools as part of our application review process, including for resume screening and fraud detection. These tools help our team evaluate applications and verify applicant information. All AI-generated recommendations are reviewed by a member of our recruiting team before any hiring decision is made. No application is automatically rejected based solely on an AI tool's output.
To apply: https://weworkremotely.com/remote-jobs/hex-technologies-cloud-security-engineer
About the role
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
About the role:
- Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
- Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
- Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
- Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
- Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
- Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
- Mentor engineers and advocate for cloud security across the organization.
About you:
- 5+ years of experience in cloud security engineering, with extensive expertise in AWS.
- Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
- Expert-level knowledge and hands-on experience with Terraform.
- Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
- Familiarity with CNAPP solutions such as Wiz
- Familiarity with SIEM solutions such as Panther
- Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
- Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
- Bonus points for security certifications from SANS or OffSec.
- Excellent problem-solving, communication, and leadership skills.
Our Engineering team
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
- How we took down production…
- Beyond Linear Notebooks
- A pragmatic approach to live collaboration
Our stack
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
The salary range for this role is: $198,750 - $295,000
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
Hex Technologies uses AI-assisted tools as part of our application review process, including for resume screening and fraud detection. These tools help our team evaluate applications and verify applicant information. All AI-generated recommendations are reviewed by a member of our recruiting team before any hiring decision is made. No application is automatically rejected based solely on an AI tool's output.
To apply: https://weworkremotely.com/remote-jobs/hex-technologies-cloud-security-engineer
WWR에서 원본 확인
원본 보기