Note: The job is a remote job and is open to candidates in USA. Abnormal AI is hiring a Senior Cloud Security Engineer to build and operate security systems protecting its FedRAMP-authorized environment. The role owns secure delivery pipelines, infrastructure security, patch and identity controls, security telemetry, audit evidence automation, and incident response across the federal platform.

Responsibilities

• Build and improve secure delivery workflows for applications and infrastructure deployed into the federal environment
• Create policy gates that evaluate infrastructure changes, security requirements, test results, and required approvals before deployment
• Integrate security scanning and control validation into delivery workflows so issues are identified early in the development process
• Review infrastructure as code changes that affect the federal boundary and help engineering teams resolve security risks before those changes reach production
• Design automation that produces change records, approval history, test results, and required evidence directly from engineering workflows
• Build and maintain hardened system image pipelines that consistently apply approved configurations, security controls, and operating system updates
• Automate patch deployment across the environment, including testing, scheduling, rollout, validation, exception management, and compliance reporting
• Improve fleet visibility so teams can quickly identify systems that are missing patches, running unsupported software, or operating outside approved configurations
• Design and enforce identity and access controls across a complex cloud environment
• Strengthen cloud security through organization policies, identity controls, resource policies, and automated configuration checks
• Build preventive guardrails that block insecure or unauthorized configurations before they enter the federal environment
• Own the reliability of security logging and monitoring pipelines, including ingestion coverage, data quality, source health, retention, and alerting
• Develop automated checks that identify missing telemetry, delayed events, broken integrations, and other conditions that could reduce security visibility
• Tune security detections to improve signal quality, reduce unnecessary alerts, and focus responders on activity that requires investigation
• Build response automation that gathers context, enriches alerts, preserves evidence, and accelerates investigation and containment
• Lead security incident response for the federal environment, including investigation, containment, recovery, evidence preservation, and after action reporting
• Partner with infrastructure, operations, product security, incident response, and compliance teams to solve security problems that cross team boundaries

Skills

• 8+ years in cloud security engineering, DevSecOps, infrastructure security, or a closely related engineering discipline, including deep hands-on experience with AWS
• Strong experience building or securing cloud deployment pipelines and infrastructure as code workflows
• Proficiency in at least one scripting or programming language, preferably Python, with a record of automating recurring operational work
• Working knowledge of identity and access management design and enforcement in large cloud environments
• Production experience with security monitoring and incident response, including investigation, containment, recovery, and operational follow through
• Experience integrating security automation into CI/CD pipelines and SecOps workflows
• Prior experience supporting federal audits or 3PAO engagements
• Knowledge of SaaS security operations and monitoring at scale
• Experience driving automation in security operations, compliance tracking, and evidence management
• Knowledge of SaaS security operations and modern cloud environments; exposure to DevSecOps pipelines or security reviews for Terraform/containers
• Experience with FedRAMP, DoD IL4, DoD IL5, government, or another highly regulated cloud environment, including support for 3PAO assessments or federal audits
• Familiarity with NIST SP 800-53 controls, continuous monitoring, security impact analysis, and technical evidence requirements
• Experience building compliance automation, continuous control monitoring, or automated evidence management capabilities

Benefits

• This role may be eligible for bonus or incentive compensation.
• This role may be eligible for equity.
• A comprehensive benefits package.

Company Overview

Company H1B Sponsorship