Cloud Security Engineer

About the role

Polymarket is on the lookout for a Cloud Security Engineer to fortify its AWS infrastructure. In this pivotal role, you will embed security protocols within the code, construct scalable defenses, and mitigate risks while ensuring that development processes remain agile. This position is hands-on and requires active collaboration with engineering teams to weave security into everyday practices.

Key facts

What you'll do

• Take charge of the security landscape of Polymarket's AWS environment, focusing on the management of IAM, Service Control Policies (SCPs), VPC configurations, and adherence to account security standards.
• Design and implement security measures within infrastructure as code, ensuring automated checks are in place for policy compliance and identifying misconfigurations during the deployment process.
• Oversee cloud security monitoring tools, including CloudTrail, GuardDuty, Security Hub, Config Rules, and VPC Flow Logs, to maintain a robust security posture.
• Develop and enhance threat detection systems, collaborating with the Security Operations Center (SOC) team to fine-tune alerts, establish incident response protocols, and conduct investigations within AWS.
• Manage secrets securely using AWS Secrets Manager and SSM Parameter Store, including the implementation of KMS policies and encryption strategies.
• Respond to security alerts generated by tools such as AWS Inspector and Security Hub, ensuring compliance with established security benchmarks.
• Support audit and compliance initiatives, conducting regular reviews of access permissions to ensure they are managed effectively.
• Work closely with engineering teams to provide guidance on secure coding practices and promote a culture of security awareness throughout the organization.
• Participate in the development of security training materials and conduct workshops to educate team members on cloud security best practices.
• Stay updated on the latest security trends and vulnerabilities, proactively recommending improvements to security protocols and practices.
• Collaborate with cross-functional teams to design and implement security solutions that align with business objectives while maintaining compliance with regulatory requirements.

Requirements

• At least 4 years of experience in cloud security, cloud engineering, or a role focused on security infrastructure.
• In-depth knowledge of AWS security services, including IAM, SCP, GuardDuty, Security Hub, CloudTrail, Config, KMS, WAF, Inspector, and VPC.
• Demonstrated experience with infrastructure as code tools such as Pulumi or Terraform, adopting a security-first mindset.
• Strong understanding of AWS networking concepts and their security implications.
• Proficiency in at least one programming or scripting language, such as Python, TypeScript, or Go, for automation purposes.
• Ability to evaluate architectural designs for security vulnerabilities and effectively communicate findings to technical teams.

Nice to have

• Familiarity with Pulumi, especially in the context of TypeScript usage.
• Knowledge of Web3, blockchain technology, or the unique security challenges associated with the cryptocurrency industry.
• Experience in securing containerized applications on ECS or EKS, including practices for image scanning and runtime security.
• Relevant AWS certifications, such as Security Specialty or Solutions Architect - Professional, are advantageous.
• Exposure to compliance frameworks like SOC 2 Type II or PCI-DSS and their cloud control requirements.

Skills & tools

• AWS Security Services: IAM, SCP, GuardDuty, Security Hub, CloudTrail, Config, KMS, WAF, Inspector, VPC
• Infrastructure as Code: Pulumi, Terraform
• Programming/Scripting Languages: Python, TypeScript, Go
• Secrets Management: AWS Secrets Manager, SSM Parameter Store
• Container Security: ECS, EKS

Practical notes

• Please note that visa sponsorship is not available for this position.
• This role is entirely remote, allowing for flexibility in your work environment.
• The benefits package includes a competitive salary, equity options, unlimited paid time off, comprehensive health insurance, and a 401k matching program.

About the company

Polymarket is the world's largest prediction market platform. We enable individuals to express views on real-world events by trading on outcomes across politics, economics, sports, culture, and current affairs.