Staff Cloud Security Engineer
Job description
About the role
You own the security posture for a modern claims platform. Daily, you design controls that protect sensitive data and enable rapid innovation. Your decisions directly shape customer trust and regulatory compliance for large insurers.
Key facts
What you'll do
Setting cloud security strategy to balance innovation with strict compliance requirements.
Architecting resilient AWS environments that protect claims data while supporting product velocity.
Conducting rigorous security assessments and vulnerability testing to identify and remediate risks.
Building and maintaining Terraform modules to create auditable, secure infrastructure-as-code pipelines.
Defining IAM policies and network segmentation to enforce least privilege and zero trust principles.
Investigating alerts and anomalies to respond swiftly to threats across cloud ecosystems and services.
Mentoring engineers on secure design patterns and emerging risks to elevate organizational security standards.
Anticipating future threat landscapes and security tools to guide long-term platform protection strategies.
Requirements
You must possess deep cloud security engineering experience focused on AWS platforms and services.
You need mastery of Terraform and infrastructure-as-code to build secure, scalable cloud solutions.
You are expected to demonstrate expertise in IAM, encryption, network security, and logging practices.
You have hands-on experience with endpoint protection technologies such as EDR, MDM, and antivirus systems.
You understand compliance frameworks including SOC 2, ISO 27001, GDPR, or HIPAA in operational contexts.
You show strong scripting and automation abilities using Python, Bash, PowerShell, or TypeScript.
You communicate effectively with both technical and non-technical stakeholders to resolve complex issues.
Nice to have
Certifications such as AWS Certified Security
Specialty, CISSP, or GIAC Cloud Security Essentials.
Familiarity with AWS security services including GuardDuty, Security Hub, Detective, WAF, CloudTrail, or SIEM platforms.
Experience with container and Kubernetes security for EKS, Docker, and Aqua Security platforms.
Understanding of Zero Trust architectures and modern identity management strategies.
Practical notes
Hours are standard; remote work is the listed location.
Benefits
Healthcare Plan: Platinum medical, dental, and vision
Free life insurance: Including long-term disability & short-term disability
Unlimited PTO: Uncapped vacation days & paid holidays
Family Leave: Maternity & paternity
401(k) Contribution: Assured contributes 3% of your income, even if you do not contribute
WFH Benefits: Lunch on us 2x/week, monthly phone stipend & other home office perks
Health FSAs & HSAs: Pre-tax accounts for out-of-pocket medical expenses
Team events & Offsites: We are remote, yet we regularly get together
We have been made aware of individuals falsely posing as recruiters from Assured Insurance Technologies Inc. Please note that we only contact candidates from official @assured.claims email addresses and all interviews are conducted through verified company channels. If you are unsure whether a message is legitimate, please contact us directly at recruiting-ops@assured.claims before sharing any personal information
About Assured
Assured is a company focused on commercial property and workers compensation expertise. It seeks a Product SME for Commercial Property and a Product SME for Workers Compensation. These roles indicate that Assured designs and manages products for these two specific lines. The company likely underwrites, administers, and supports policyholders in these sectors. Its structure suggests teams that translate insurance requirements into product features. The Product SME roles imply close work with stakeholders to define needs and outcomes. Assured probably collaborates with partners who deliver services to clients. Its operations may include risk assessment, claims handling, and regulatory compliance. The focus remains on these two defined areas rather than broad market activity. The company appears to build specialized solutions for property and workers compensation risks. These roles support the ongoing refinement and management of its product suite. Assured operates with clear lines around its core business domains.