Note: The job is a remote job and is open to candidates in USA. PlayOn Sports is a growth-stage company focused on high school athletics technology. They are seeking a Cloud Security Engineer to secure their multi-cloud environment and automate security processes while ensuring safe adoption of enterprise AI services.
Responsibilities
- Design, implement, and maintain security controls across GCP and AWS, including IAM, network segmentation, encryption, logging, and key management
- Operate and tune CrowdStrike Falcon Cloud Security (CSPM) to continuously monitor cloud posture, triage misconfigurations, and drive remediation across accounts and projects
- Run and extend Prowler assessments to benchmark environments against CIS, NIST, and internal standards, integrating findings into automated reporting and ticketing workflows
- Build and maintain security infrastructure as code using Terraform, ensuring controls are versioned, peer-reviewed, and consistently applied across environments
- Embed security into CI/CD pipelines through GitHub (Actions, branch protection, secret scanning, dependency review) so issues are caught before they reach production
- Secure containerized workloads running on Amazon EKS, covering cluster hardening, RBAC, network policies, image scanning, and runtime protection
- Define and enforce security guardrails for enterprise AI adoption, including data governance, access controls, prompt/output safeguards, and monitoring for Amazon Bedrock and Google Gemini Enterprise
- Develop and design agentic security detection and response capabilities, with a focus on scaling existing processes leveraging AI
- Investigate and respond to cloud security incidents, perform root-cause analysis, and lead improvements that prevent recurrence
- Develop automation and tooling to reduce manual effort, improve detection coverage, and provide clear, actionable metrics to leadership
Skills
- 5+ years in cloud security, security engineering, or a closely related role
- Hands-on experience securing both GCP and AWS in production environments
- Strong working knowledge of Terraform and an infrastructure-as-code mindset
- Proficiency with GitHub-based workflows and integrating security into CI/CD pipelines
- Experience with cloud security posture management tooling such as CrowdStrike CSPM and Prowler
- Practical experience securing Kubernetes, ideally Amazon EKS
- Solid grasp of cloud IAM, networking, encryption, and logging fundamentals
- Scripting ability in Python, Go, or a similar language for automation
- Hands-on experience with SIEM platforms for log aggregation, detection, and security monitoring
- Experience securing or governing enterprise AI / LLM platforms such as Amazon Bedrock or Google Gemini Enterprise
- Experience developing Agentic Security capabilities
- Familiarity with security frameworks (CIS Benchmarks, NIST, SOC 2, ISO 27001)
- Detection engineering or threat-modeling experience
- Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS Security Specialty, CKS, CISSP)
Benefits
- Multiple medical insurance plans to choose from
- Dental, vision life and disability insurance
- Employee Emergency Fund
- Open PTO policy
- 401K plan with company match
- Hybrid/flexible work environment
- Company equity (stock options)
- Note: Must be a full-time employee to participate in the company’s employee health benefit plan. Part-time employees and interns are not eligible to participate
Company Overview