[Remote] Cloud Security Engineer

Note: The job is a remote job and is open to candidates in USA. PlayOn Sports is a growth-stage company focused on high school athletics technology. They are seeking a Cloud Security Engineer to secure their multi-cloud environment and automate security processes while ensuring safe adoption of enterprise AI services.

Responsibilities

• Design, implement, and maintain security controls across GCP and AWS, including IAM, network segmentation, encryption, logging, and key management
• Operate and tune CrowdStrike Falcon Cloud Security (CSPM) to continuously monitor cloud posture, triage misconfigurations, and drive remediation across accounts and projects
• Run and extend Prowler assessments to benchmark environments against CIS, NIST, and internal standards, integrating findings into automated reporting and ticketing workflows
• Build and maintain security infrastructure as code using Terraform, ensuring controls are versioned, peer-reviewed, and consistently applied across environments
• Embed security into CI/CD pipelines through GitHub (Actions, branch protection, secret scanning, dependency review) so issues are caught before they reach production
• Secure containerized workloads running on Amazon EKS, covering cluster hardening, RBAC, network policies, image scanning, and runtime protection
• Define and enforce security guardrails for enterprise AI adoption, including data governance, access controls, prompt/output safeguards, and monitoring for Amazon Bedrock and Google Gemini Enterprise
• Develop and design agentic security detection and response capabilities, with a focus on scaling existing processes leveraging AI
• Investigate and respond to cloud security incidents, perform root-cause analysis, and lead improvements that prevent recurrence
• Develop automation and tooling to reduce manual effort, improve detection coverage, and provide clear, actionable metrics to leadership

Skills

• 5+ years in cloud security, security engineering, or a closely related role
• Hands-on experience securing both GCP and AWS in production environments
• Strong working knowledge of Terraform and an infrastructure-as-code mindset
• Proficiency with GitHub-based workflows and integrating security into CI/CD pipelines
• Experience with cloud security posture management tooling such as CrowdStrike CSPM and Prowler
• Practical experience securing Kubernetes, ideally Amazon EKS
• Solid grasp of cloud IAM, networking, encryption, and logging fundamentals
• Scripting ability in Python, Go, or a similar language for automation
• Hands-on experience with SIEM platforms for log aggregation, detection, and security monitoring
• Experience securing or governing enterprise AI / LLM platforms such as Amazon Bedrock or Google Gemini Enterprise
• Experience developing Agentic Security capabilities
• Familiarity with security frameworks (CIS Benchmarks, NIST, SOC 2, ISO 27001)
• Detection engineering or threat-modeling experience
• Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS Security Specialty, CKS, CISSP)

Benefits

• Multiple medical insurance plans to choose from
• Dental, vision life and disability insurance
• Employee Emergency Fund
• Open PTO policy
• 401K plan with company match
• Hybrid/flexible work environment
• Company equity (stock options)
• Note: Must be a full-time employee to participate in the company’s employee health benefit plan. Part-time employees and interns are not eligible to participate

Company Overview