Sr Security Engineer

Senior Cloud Security Engineer

We are Lennar 

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

Join a Company that Empowers you to Build your Future

Lennar is seeking an experienced Senior Cloud Security Engineer to design, implement, and operate security capabilities that protect our cloud environments and cloud-delivered platforms. This is a critical technical leadership position that will shape our cloud security strategy as we continue expanding business operations across integrated cloud environments. You'll partner closely with Security Engineering, Architecture, Infrastructure, and application teams to ensure our cloud controls meet rigorous business, risk, and compliance requirements.

• A career with purpose.

• A career built on making dreams come true.

• A career built on building zero defect homes, cost management, and adherence to schedules.

Your Responsibilities on the Team 

Cloud Security Strategy & Technical Leadership

• Drive cloud security strategy, roadmap development, and execution across Lennar's cloud environments.

• Lead technical planning, design decisions, and implementation of enterprise-grade cloud security controls.

• Serve as the technical authority for cloud security architecture and best practices.

AI & GenAI Security Engineering

• Design and implement security controls that enable safe adoption of AI services and AI-assisted workflows, including cloud-hosted AI platforms and SaaS copilots.

• Establish comprehensive guardrails for AI usage covering data protection, access control, logging/monitoring, and approved service standards.

• Assess and mitigate emerging AI risks including prompt injection, data leakage, model exposure, insecure plugins/connectors, and supply chain vulnerabilities in AI pipelines.

• Collaborate with Legal, Privacy, and GRC teams to support AI governance requirements and maintain control evidence.

Cloud Security Platform Management

Build and manage security solutions across IaaS, PaaS, and SaaS environments, including:

• CSPM (Cloud Security Posture Management)
• CASB (Cloud Access Security Broker)
• CNAPP (Cloud-Native Application Protection Platform)
• SSE (Security Service Edge)

Ensure consistent deployment, configuration, and monitoring of security tooling across all cloud environments.

DevSecOps & Application Security

• Partner with DevOps and engineering teams to embed security into CI/CD pipelines and cloud-native platforms.

• Implement and support DevSecOps tooling and practices including SAST/DAST.

• Drive remediation of security findings in collaboration with development teams.

Governance, Risk & Compliance

• Align cloud security controls with legal, regulatory, and compliance requirements.

• Develop and enforce cloud security standards, policies, and best practices.

• Support internal and external audit requests and lead remediation efforts.

Operational Support & Incident Response

• Participate in security incident response activities, including investigation and post-incident analysis.

• Provide guidance to enhance detection, logging, and response capabilities for cloud environments.

Mentorship & Knowledge Sharing

• Mentor junior engineers and provide technical guidance across security engineering and operations teams.

• Foster a culture of security awareness and continuous improvement.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field required; Master's degree preferred.

• 5+ years of cloud security engineering experience in mid-to-large enterprise environments (1,000+ employees).

• 5+ years securing public cloud platforms (AWS and/or Azure; Oracle Cloud Infrastructure a plus).

• 3+ years implementing DevSecOps practices and SDLC security, including SAST/DAST and v