Note: The job is a remote job and is open to candidates in USA. Polymarket is the world's largest prediction market platform, enabling individuals to express views on real-world events through trading outcomes. They are hiring a Cloud Security Engineer to manage and enhance the security posture of their AWS environment, working cross-functionally with various teams to ensure security is integrated into their development processes.
Responsibilities
- Own and continuously improve Polymarket's AWS security posture across accounts, regions, and services — including IAM policies, SCPs, VPC segmentation, and account-level security baselines
- Review and contribute to IaC modules that encode security defaults; integrate automated security checks into the deployment pipeline including policy-as-code validation and misconfiguration scanning
- Own cloud-side security telemetry: CloudTrail, GuardDuty, Security Hub, Config Rules, VPC Flow Logs, and S3 access logging
- Develop and tune detection logic for cloud-specific threats; partner with the SOC team on alert fidelity, incident response runbooks, and AWS-level investigations
- Govern secrets management using AWS Secrets Manager and SSM Parameter Store; manage KMS key policies, rotation, and envelope encryption patterns
- Drive remediation of findings from AWS Inspector, Security Hub, and third-party CSPM tooling; maintain benchmarks aligned to CIS AWS Foundations
- Support audit and compliance activities (SOC 2, PCI-DSS, or similar) and conduct regular access reviews to identify and remediate privilege creep
Skills
- 4+ years of experience in cloud security, cloud engineering, or a security-focused infrastructure role
- Deep, hands-on expertise with AWS security services: IAM, SCP, GuardDuty, Security Hub, CloudTrail, Config, KMS, WAF, Inspector, and VPC
- Hands-on experience writing infrastructure as code (Pulumi, Terraform, CDK, or equivalent) with a security-first mindset
- Strong understanding of AWS networking and how misconfigurations translate to real attack surface
- Proficiency in at least one scripting or programming language (Python, TypeScript, or Go) for automation and tooling
- Ability to evaluate architectural decisions for security risk and communicate findings clearly to engineering peers
- Familiarity with Pulumi, specifically TypeScript-based stacks
- Familiarity with Web3, blockchain infrastructure, or crypto-sector threat models
- Experience securing containerized workloads on ECS or EKS, including image scanning and runtime security
- AWS certifications: Security Specialty, Solutions Architect — Professional, or equivalent
- Exposure to SOC 2 Type II or PCI-DSS cloud control requirements
Benefits
- Unlimited PTO
- Full Health, Vision, & Dental coverage
- 401k match
- Hardware setup: new MacBook Pro, big display, & accessories
Company Overview
Company H1B Sponsorship