Sr. Cloud Security Engineer

We believe in a world where growth thrives across borders and cultures. Our mission is to guide companies on their journey by providing services and technology that enables global talent management and delivers a human experience.

 

As an Employer-of-Record (EOR) provider, we offer the HR and compliance infrastructure essential for companies to expand internationally. We take care of the complex, behind-the-scenes work, allowing companies to focus on the strategies that drive their success. We are For People, By People. 

 

The future of work is borderless, and so are we. Our people are located around the globe — in the U.S., the UK, India, Colombia, China, and beyond. Diversity and belonging are not just values, they are who we are. 

 

We are also committed to making a positive impact. Through our Environment, Social, and Governance (ESG) impact initiative, we are addressing our environmental footprint and promoting social responsibility. Our impact program is central to our vision and culture, focusing on employee wellness, diversity, charitable work, and ethical corporate governance.

 

If you are interested in working in a people-centric, global organization, apply below.

 

Job Summary:

As a Senior Cloud Security Engineer, you will be responsible for safeguarding our Azure cloud environment and HR platform using tools like SentinelOne, Purview, Defender for Cloud, and SonarQube. You’ll lead pen testing, drive application security, and support development teams in building secure-by-design solutions. This role blends hands-on technical execution with ISO 27001–aligned compliance, automation, and continuous improvement.

Key Responsibilities:

• Design, implement, and maintain security controls for cloud environments Azure & AWS
• Conduct advanced penetration testing across cloud workloads, APIs, and containerized environments to identify vulnerabilities and validate application security controls.
• Lead application security reviews, including threat modeling, static/dynamic analysis, secure code review, and remediation guidance.
• Partner closely with the development and DevOps teams to integrate security into CI/CD pipelines, provide secure-coding best practices, and support product teams during architecture/design.
• Architect, implement, and optimize security controls across AWS/Azure/GCP environments (IAM, VPC, KMS, WAF, Secrets Management, Logs).
• Strengthen security across Azure workloads, data, and identities using tools like Microsoft Defender for Cloud, SentinelOne, Purview, and SonarQube.
• Collaborate with and support DevOps and Engineering teams to integrate security into the software development lifecycle (DevSecOps).
• Manage network and web application firewalls to protect internal systems and applications.
• Integration of SIEM and IDS solutions with cloud monitoring tools for real-time alerting and automated remediation.
• Work with our SOC to ensure appropriate logging and alerting are configured and administered. Review Alerts and ensure timely resolutions are conducted.
• Build and monitor systems and security dashboards to ensure availability and potential issues are addressed immediately.
• Participate in ISO 27001 SOC 2, or CIS benchmark security program and audits. Conduct regular security assessments, vulnerability scans, and cloud configuration audits.
• Monitor and respond to security incidents, anomalies, and potential threats in our cloud environment and applications.
• Develop and automate security controls, guardrails, and incident response playbooks.
• Stay current on the latest cloud security trends, HR data protection laws, application security, and SaaS security best practices.

Required Qualifications:

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent experience.
• 7+ years of hands-on experience in cloud security roles, penetration testing, application security, app development support and ideally in SaaS or HR tech environments.
• Strong expertise with MS Azure security services (e.g., IAM, Key Vault, Auth0, Key Cloak).
• Deep understanding of data privacy, encryption, access management, application security, and secure API design.
• Familiarity with compliance frameworks such as ISO27000, SOC 2, GDPR.
• Experience with security monitoring tools (e.g., SIEMs, CSPM solutions).
• Scripting skills (Python, Bash, PowerShell) for automation of security tasks.

Preferred Qualifications:

• Certifications like AWS Certified Security Specialty, Azure Security Engineer Associate, CISSP, or CCSP.
• Experience securing containerize