[Remote] Security Engineer
Note: The job is a remote job and is open to candidates in USA. Intent Talent Solutions is seeking a Security Engineer to design and implement controls that protect customer applications, cloud environments, and data. The role owns security workstreams end-to-end, including threat modeling, cloud infrastructure hardening, security tooling integration, detection tuning, vulnerability remediation, compliance mapping, and collaboration with engineering teams.
Responsibilities
- Conduct threat modeling and security design reviews on new and existing applications and services
- Design and implement IAM, encryption, network, and logging controls in cloud environments (AWS, Azure, GCP)
- Integrate and tune security tooling (SAST, DAST, SCA, secret scanning, IaC scanning, CSPM) in CI/CD pipelines
- Build and tune detection content in SIEM and cloud-native security tools; participate in incident response
- Lead vulnerability management and remediation work across application, infrastructure, and container environments
- Map controls to compliance frameworks (SOC 2, HIPAA, PCI, ISO 27001, NIST) and support audit evidence collection
- Collaborate with developers, platform engineers, and architects to embed security into delivery practices
- Use agentic AI tools (e.g., Claude, Cursor, GitHub Copilot, Coco, or similar) in real delivery work, following the client's agentic AI operating model and usage guidelines
Skills
- 4-7 years owning security engineering work across cloud, application, and infrastructure domains
- Experience designing and implementing IAM, encryption, network, and logging controls in AWS, Azure, or GCP
- Experience integrating security tooling (SAST, DAST, SCA, IaC scanning, CSPM) into CI/CD pipelines
- Experience leading threat modeling and security design reviews
- Experience contributing to incident response, detection engineering, and vulnerability management
- Hands-on experience using agentic AI tools in real delivery work, evaluated on demonstrated proficiency and judgment rather than tenure
- Strong cloud security expertise in AWS, Azure, or GCP (IAM, KMS, VPC, Security Hub/Defender/SCC)
- Application security expertise (OWASP Top 10, secure coding, threat modeling, secure SDLC)
- Deep familiarity with vulnerability management (Wiz, Prisma Cloud, Tenable, Qualys) and SAST/DAST/SCA tools (Snyk, Checkmarx, Veracode, Semgrep)
- Infrastructure-as-code (Terraform, CloudFormation, Bicep) with IaC security scanning (Checkov, tfsec)
- Container and Kubernetes security (image scanning, admission controllers, network policies, RBAC)
- Detection engineering and SIEM content (Splunk, Sentinel, Chronicle) including KQL/SPL/YARA-L
- Identity protocols (OAuth2, OIDC, SAML) and IdP configuration (Okta, Entra ID, Auth0)
- Scripting in Python, Bash, or PowerShell for automation and tooling
- Understanding of compliance frameworks (SOC 2, HIPAA, PCI, ISO 27001, NIST CSF, FedRAMP) and ability to map controls
- Incident response participation including triage, investigation, and post-incident reviews
- Strong communication skills for working with developers and platform teams
- Agile or hybrid project delivery models
- Leads security workstreams within sprint cadence and partners with engineering teams on remediation
- AWS Certified Security — Specialty, Azure SC-200/SC-100, GCP Professional Cloud Security Engineer, CISSP (in progress acceptable), OSCP, CKS
Benefits
- Contract Remote Role
Company Overview