Senior Cloud Security Engineer
brillioBrooklyn (NY)
Senior Cloud Security Engineer
Posted today
brillioBrooklyn (NY)
SENIORITY
Lead
About the role
Overview:
In this role you will advance Brillio’s cloud security posture by building automated, secure-by-default tooling and controls. You will partner with engineering and security teams to harden cloud environments across AWS, Azure, and GCP, while guiding secure practices throughout the development lifecycle. You’ll lead security assessments, threat modeling, and incident response to prevent and remediate risks at scale. This is a hands-on, cross-functional role in a fast-growing digital services company with a strong focus on security enablement and collaboration.
Responsibilities:
Develop and implement automated security tools, frameworks, and guardrails to enable secure-by-default practices without slowing development Design, implement, and maintain scalable cloud security controls for cloud infrastructure, applications, and enterprise environments Collaborate with engineering and security teams to strengthen configurations and security posture Partner with engineering, infrastructure, and technology stakeholders to embed security in the development lifecycle Support investigation and response to security incidents, identify root causes, implement preventive measures Conduct security assessments of third-party integrations and emerging AI tools to ensure data protection and compliance Participate in threat modeling and architecture reviews to identify vulnerabilities early in development Guide development teams on security best practices, remediation, and risk mitigation
Key requirements:
5+ years in information security or related field At least 2+ years hands-on cloud security experience Strong AWS knowledge (IAM, EC2, VPC, ECR, ECS, EKS) Strong Azure security configurations Foundational knowledge of GCP security capabilities Hands-on experience with CNAPP or similar cloud security solutions (e.g., Wiz, Orca, Lacework, Upwind) Programming/scripting experience (Python or Go) for automation Solid understanding of security principles (least privilege, defense-in-depth, monitoring, CSPM) Experience with Docker and Kubernetes Excellent communication and collaboration skills Ability to work with engineering teams to improve security practices strong communication collaboration problem-solving AWS IAM, EC2, VPC, ECR, ECS, EKS Azure cloud security configurations GCP security capabilities
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.