Senior Cloud Security Engineer - Remote

Overview

We are Progress (Nasdaq: PRGS) - the trusted provider of software that enables our customers to develop, deploy and manage responsible, AI-powered applications and experiences with agility and ease.  
We’re proud to have a diverse, global team where we value the individual and enrich our culture by considering varied perspectives because we believe people power progress. Join us as a Senior Cloud Security Engineer and help us do what we do best: propelling business forward.  This will be a hybrid role so dividing your time between working in your home office and our Raleigh NC office.

In Short

• Design, implement, and manage AWS and Azure-based solutions that integrate security measures through policy as code.
• Collaborate with development and operations teams across the globe to embed security practices into the software development lifecycle.
• Develop and maintain infrastructure as code (IaC) templates using tools like AWS CloudFormation or Terraform to enforce security policies, driven via CI/CD practices.
• Create and maintain security policies as code using frameworks like AWS CloudFormation Guard, Open Policy Agent (OPA), or similar tools.
• Implement and automate security controls, such as identity and access management (IAM), encryption, network security, and compliance auditing.
• Monitor and respond to security incidents, vulnerabilities, and threats in the AWS and Azure environments.
• Perform security assessments to identify and remediate vulnerabilities.
• Research and stay up-to-date with the latest cloud security best practices, tools, and technologies.
• Mentor and guide software engineers promoting knowledge sharing and skill development.

Requirements

• Bachelor’s degree in computer science, information technology, or a related field (or equivalent experience).
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS and Azure.
• Strong understanding of cloud services, architecture, and security best practices.
• Proficiency in implementing security measures using policy as code tools and frameworks.
• Experience with IaC tools such as AWS CloudFormation, Terraform, etc.
• Familiarity with scripting languages (e.g., Python, Bash) for automation tasks.
• Knowledge of industry security standards (e.g., ISO 27001, NIST) and regulatory requirements.
• Relevant AWS certifications (e.g., AWS Certified DevOps Engineer, AWS Certified Security Specialty) would be a plus.
• Experience in designing and implementing automated testing procedures for security controls within the AWS environment.
• Demonstrated ability to create automated remediation processes based on testing outcomes.
• Excellent problem-solving skills and the ability to work effectively in a fast-paced, collaborative environment.
• Strong communication skills to interact with cross-functional teams across different time zones and articulate security concepts.
• Experience with security testing and remediation frameworks.
• Experience with Tools such as Wiz and Harness, is a significant plus.

Benefits

• Medical, dental, vision, life & disability, and financial benefits (including 401(k) retirement savings plan. Tuition Reimbursement program. Additional voluntary benefits including crucial illness/hospital indemnity, identity theft protection, auto & home insurance, legal, and pet insurance.
• Competitive salary, bonus, and best-in-class Employee Stock Purchase Program (ESPP) with a 27-month lookback.
• Flexible paid vacation time, paid day off for your birthday, and company holidays. A variety of leave plans, including Parental Leave.
• Employee Assistance Program (EAP) and an employee well-being program focusing on physical, mental, and financial health.

Translated from [original language]