Staff Cloud Security Engineer

📋 Description

• Own CrowdStrike Falcon configuration, ensuring policies are scoped, tuned, and generating actionable alerts.
• Partner with MDR to define alert routing, triage thresholds, and escalation logic, ensuring the right signals reach the right team.
• Monitor cloud environments (primarily AWS) for security posture drift: misconfigured IAM roles, overly permissive security groups, exposed storage, and non-compliant resource configurations.
• Secure Kubernetes clusters and containerized workloads: manage Network Policies, RBAC, Admission Controllers, and runtime detection for anomalous container behavior.
• Develop and enforce cloud security policies for AWS infrastructure and secure, scalable deployments align with organizational risk posture.
• Evaluate and lead the implementation of additional detection tooling, including cloud SIEM platforms, designing detection rules and alerting pipelines.

🎯 Requirements

• Minimum 8 years of experience in cloud security, security engineering, or related infrastructure security discipline.
• Hands-on experience with CSPM platforms (CrowdStrike, Wiz, Prisma Cloud, Orca) and strong CrowdStrike familiarity is a plus.
• Deep familiarity with AWS security architecture: IAM/SCP policy design, VPC networking, security groups, CloudTrail, and cloud-native controls. GCP or Azure experience considered for strong candidates.
• Proficiency with infrastructure as code (IaC) tools such as Terraform, OpenTofu, or CloudFormation, with understanding of enforcing security within IaC workflows.
• Strong Python and shell scripting skills for security automation, detection rule development, and tooling integration.
• Must be a US Citizen or legal permanent resident (Xometry handles ITAR-controlled data).
• Kubernetes security experience: securing production clusters, including Network Policies, RBAC, and Admission Controllers.
• Bachelor’s degree in Computer Science, Information Security, or a related field.

🎁 Benefits

• 401(k) match and comprehensive medical, dental, and vision insurance.
• Life and disability insurance.
• Generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave.
• EAP and wellbeing resources.
• Paid parental leave and family benefits where available.
• Remote-friendly policies and supportive workplace culture.