Cloud Security Engineer (AWS)

Location: Somerville, Massachusetts; hybrid work with at least 3 days per week in the office

Salary: $110,000–$150,000 per year across US locations

Company

Tulip develops an AI-native, cloud-native, no-code platform for connected frontline operations and industrial environments.

What you will do

• Design, build, and maintain cloud security controls as code, including posture hardening and account-level guardrails.
• Own vulnerability management across cloud environments, from triage and prioritization through remediation.
• Tune detections, reduce false positives, and improve recurring alert-review workflows.
• Build and maintain log-ingestion and SIEM pipelines and participate in incident response.
• Partner with Infrastructure, Product Engineering, and Product Management on architecture, authentication, application security reviews, code review, and automated testing.
• Support FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Requirements

• 5+ years of experience in security engineering with hands-on ownership of cloud security work.
• Deep experience securing AWS and/or Azure environments, including containerized and Kubernetes workloads such as EKS or AKS.
• Experience building and managing security controls as code with Terraform and Python or similar technologies.
• Experience authoring and tuning detections and SIEM rules, plus vulnerability and container-image scanning in CI.
• Working knowledge of FedRAMP, ISO 27001, or SOC 2 and related evidence practices.
• Bachelor’s degree in a technical field or equivalent professional experience.

Nice to have

• Incident response or forensics experience.
• Threat modeling for new services.
• Experience running internal security exercises.

Culture & Benefits

• Hybrid work environment with a flexible work schedule.
• Health, dental, vision, disability, life, AD&D, FSA, commuter, parental leave, and 401(k) benefits.
• Company equity and unlimited vacation policy.
• Learning and Development program, fitness subsidies, and virtual company events.
• Inclusive, dog-friendly office and a focus on personal well-being and diverse collaboration.