Security Engineer II, Cloud Security

HashiCorp's Cloud Infrastructure & Platform Security team is responsible for the security of HashiCorp's cloud - both our cloud service provider (AWS, Azure, GCP) environments and our underlying HCP platform infrastructure. This is a fully remote team. While prior experience working remotely isn't required, we are looking for team members who perform well given a high level of independence and autonomy.

What you'll do

This role provides a great opportunity for those who are passionate about advancing our security posture in a multi-cloud estate, those passionate about building scalable software to solve security problems, and, especially, those who are passionate about both.

As a member of the team, you'll help:

1. Define insightful metrics to further guide our cloud security posture and progress.
2. Ensure we have best practices implemented across our multi-cloud environment.
3. Partner with engineering and other stakeholders to define and drive secure-by-default environments supporting our products and the enterprise.
4. Develop tooling to drive our cloud security program forward.

What you'll need (basic qualifications)

1. You have a broad understanding of the fundamentals of AWS security. It's a plus if you can explain their policy evaluation logic.
2. You have 3+ years of software development experience (Go and/or Python preferred).
3. You have experience codifying infrastructure and deployment pipelines (Terraform and GitHub Actions preferred).
4. You have strong written and verbal communication skills and have experience articulating security risk to stakeholders across an organization.
5. You are able to seek out opportunities for a high-degree of positive impact and outline paths forward without explicit direction.
6. You agree with, understand, and consistently display the principles of HashiCorp in your interactions and in your work.

What's nice to have (preferred qualifications)

1. You have a broad understanding of the fundamentals of Azure security.
2. You have experience utilizing Azure Policies to enforce security standards across an Azure tenant.