Sr. Cyber Security Engineer - Automation

Terraform and AWS Automation

• Design and maintain Terraform modules, guardrails, and policy-as-code controls for AWS environments.
• Automate secure configuration across IAM, Organizations, VPC, CloudTrail, CloudWatch, S3, KMS, Lambda, ECS/EKS, and Secrets Manager.
• Build safe detection and remediation flows with least privilege, change controls, dry runs, rollback approaches, and audit-ready logging.

AI Enablement and Technical Leadership

• Develop governed internal AI automations and agents with approved models, tools, knowledge sources, and identity boundaries.
• Design agent workflows with scoped tools, input validation, prompt-injection defenses, audit logs, evaluations, and human approvals.
• Create reusable patterns for tool calling, retrieval, workflow orchestration, context handling, and secure deployment, and mentor teams.
• Translate needs into an automation roadmap, lead design reviews, mentor engineers, and communicate tradeoffs and risk.

Required Qualifications

• Strong Python engineering skills covering API integration, testing, packaging, error handling, and production troubleshooting.
• Hands-on GitHub and GitHub Actions expertise, including reusable workflows, OIDC, permissions, secure secrets use, and CI/CD controls.
• Strong Terraform experience with modules, state, plans, code review, testing, and policy or guardrail implementation.
• Deep practical understanding of AWS security and cloud architecture, including IAM, network boundaries, logging, encryption, and serverless or container services.
• Experience designing reliable, observable, least-privileged, and safely deployable automation.
• Ability to lead design discussions, review code, guide cross-team work, and understand AI/LLM application risks.

Preferred Qualifications

• Experience with security orchestration, SIEM/SOAR, detection engineering, incident response, or vulnerability-management automation.
• Experience with policy-as-code and tools such as OPA, Checkov, tfsec, Trivy, AWS Config, Security Hub, or GuardDuty.
• Hands-on delivery with LLM APIs, agent frameworks, MCP, RAG, evaluation frameworks, or enterprise AI platforms.
• AWS Security Specialty, AWS DevOps Engineer, CISSP, Security+, or comparable certification.
• Experience operating Docker, Kubernetes, ECS, or EKS workloads.

Level Expectations and Success