Cloud Security Engineer

Join Tulip, a leading company in the cloud security space. As a Cloud Security Engineer, you will work closely with Infrastructure and Product Engineering teams, acting as a subject matter expert in various security domains. Your responsibilities will include designing and maintaining security controls, managing vulnerability assessments, and supporting compliance efforts. You will have a direct impact on the product and culture, with a flexible work environment and competitive benefits.

• Design, build, and maintain security controls as code across cloud environments, including posture hardening and account-level guardrails.
• Own vulnerability management end-to-end — triage findings across environments, prioritize to control noise, and drive remediation to closure.
• Build and maintain log-ingestion and SIEM pipelines, and participate in incident response.

• Building and managing security controls as code with Terraform and Python, or similar
• Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it
• Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises
• 5+ years of experience in security engineering, with hands-on ownership of cloud security work
• Deep, hands-on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads
• Bachelor's degree in a technical field, or equivalent working experience
• Authoring and tuning detections and SIEM rules, and running vulnerability and container-image scanning in CI
• We know even great candidates experience imposter syndrome. Even if you don't match every requirement, applying gives you the opportunity to be considered