Cloud Security Engineer

• You’re a hands-on Security Engineer who partners closely with Infrastructure and Product Engineering teams and acts as a subject matter expert across a broad range of security domains
• As part of Tulip’s Security team, you’ll improve and expand our cloud, detection, and vulnerability-management work that keeps our platform and our customers safe. You will operate primarily in AWS, build and automate security controls as code (Terraform, Lambda/Python), and help mature the security posture of our environment
• Design, build, and maintain security controls as code across our cloud environments, including posture hardening and account-level guardrails
• Own vulnerability management end-to-end — triage findings across environments, prioritize to control noise, and drive remediation to closure
• Own the recurring alert-review workflow: tune detections, cut false positives, and improve coverage over time
• Build and maintain log-ingestion and SIEM pipelines, and participate in incident response
• Partner with engineers and product managers on architecture, authentication, and application security reviews, including code review and automated testing
• Support our FedRAMP program and other compliance efforts — documentation upkeep, alert monitoring, evidence collection, running training exercises, and customer security questionnaires
• Key Collaborators:
• Infrastructure and Product Engineering
• IT, Legal & Compliance, and Product Management
• Engineering and Security leadership

Benefits

• Impactful Work: Have a direct impact on product and culture
• Work/Life Balance: Flexible work and unlimited vacation policy, virtual company events and happy hours
• Additional Perks: Commuter benefits, a work-from-home stipend, fitness subsidies
• Competitive Benefits: Healthcare, Dental, Vision, Short-term Disability, Long-term Disability, Health Reimbursement Account (HRA)
• Family-Friendly Policies: Parental Leave, 401K & Life Insurance
• Employee-Led Communities: Parents@Tulip, Hey Lady, Allies@Tulip and more
• Building and managing security controls as code with Terraform and Python, or similar
• Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it
• Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises
• 5+ years of experience in security engineering, with hands-on ownership of cloud security work
• Deep, hands-on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads
• Bachelor’s degree in a technical field, or equivalent working experience
• Authoring and tuning detections and SIEM rules, and running vulnerability and container-image scanning in CI
• We know even great candidates experience imposter syndrome. Even if you don’t match every requirement, applying gives you the opportunity to be considered