Senior Cloud Security Engineer

About Us: Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world's top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people's lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle. Overview: The Senior Cloud Security Engineer reduces material risk across large-scale AWS, Azure, and multi-cluster Kubernetes environments. This engineer operates and continuously improves our CSPM/CNAPP platform, investigates complex exposure paths, strengthens cloud security guardrails, and works with Cloud Operations, SRE, and engineering teams to drive remediation through closure. This is also a builder role. You will use Python, APIs, infrastructure as code, and modern AI-assisted engineering tools to develop secure dashboards, integrations, automation, and analytical workflows. Success requires strong cloud security judgment, practical engineering ability, and the persistence to drive findings through remediation rather than simply reporting them. What You'll Do Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid infrastructureUse CSPM/CNAPP telemetry to investigate vulnerabilities, misconfigurations, identity risks, exposure paths, and publicly accessible servicesValidate and prioritize findings based on real-world risk, then work with infrastructure owners to drive remediation through closureDevelop secure dashboards, integrations, automation, and analytical workflows using APIs and modern AI-assisted engineering toolsSecure Kubernetes environments and containerized workloads across the software development lifecycleConduct security reviews of cloud architecture, infrastructure patterns, identities, network controls, and deployment pipelinesBuild automation, guardrails, reporting, and repeatable processes that improve cloud security visibility and executionInvestigate cloud security incidents and support response, containment, and corrective action Requirements What You Must Have 7+ years of professional experience in security engineering, cloud engineering, infrastructure engineering, or a closely related technical role. 3+ years of direct, hands-on responsibility for securing production cloud environments, with depth in AWS or Azure and practical experience with the otherBachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical fieldHands-on experience operating an enterprise CSPM/CNAPP platform, such as Orca, Wiz, Prisma Cloud, or Microsoft Defender for Cloud, including tuning policy, investigating findings, prioritizing material risk, and driving remediation rather than simply consuming platform outputExperience building and shipping production-quality security tooling, automations, integrations, or dashboards using Python and APIs, supported by infrastructure as code and modern CI/CD practices. Candidates should be prepared to walk through something they built and explain their individual contributionStrong command of cloud security fundamentals at scale in your primary cloud: IAM, network security, logging and detection, encryption and key management, and secure configurationHands-on experience securing production Kubernetes environments, including workload identity, network controls, secrets management, admission policies, image security, and runtime visibilityDemonstrated ability to use modern AI-assisted development tools to accelerate engineering workCurrent AWS or Azure security or architecture certification, such as AWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate or Professional, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Azure Solutions Architect ExpertExperience working directly with Cloud Operations, SRE, or engineering teams to drive remediation of cloud security risk Preferred Qualifications Experience securing large, globally distributed or multi-cloud environmentsMultiple cloud security or architecture certifications beyond the required minimumAdvanced experience implementing policy as code, automated cloud guardrails, and security controls within CI/CD pipelines Benefits Salary range: $150,000-$180,000 Fully paid medical, dental, and vision insurance (partial premium coverage for dependents)Employer quarterly contributions to 401k funds15 days accrued vacation11 paid holidaysBi-annual reviews, and annual pay increasesHealth and wellness benefits, including free gym membershipQuarterly team-building event At TP-Link Systems Inc., we are continually searching for ambitious individuals who are passionate about their work. We believe that diversity fuels innovation, collaboration, and drives our entrepreneurial spirit. As a global company, we highly value diverse perspectives and are committed to cultivating an environment where all voices are heard, respected, and valued. We are dedicated to providing equal employment opportunities to all employees and applicants, and we prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Beyond compliance, we strive to create a supportive and growth-oriented workplace for everyone. If you share our passion and connection to this mission, we welcome you to apply and join us in building a vibrant and inclusive team at TP-Link Systems Inc. Please, no third-party agency inquiries, and we are unable to offer visa sponsorships at this time.