Senior Security Engineer - Cloud (Cloud Security)

Location: Hybrid work in the San Jose, CA office three days per week, or fully remote from an approved U.S. location. Muon is registered and able to hire in AL, AZ, CA, CO, CT, DC, FL, GA, IL, IA, ID, MD, MA, MI, MN, MO, NJ, NY, NC, OH, OR, PA, TN, TX, VT, VA, and WA.

Salary: $193,000–$218,000 per year, plus equity and benefits.

Company

hirify.global designs, builds, and operates LEO satellite constellations and spacecraft for mission-critical Earth intelligence, including climate monitoring and national security applications.

What you will do

• Drive cloud security posture management across AWS, GCP, and Azure, including IAM, storage, network security, and cloud monitoring.
• Architect secure cloud landing zones, account structures, network segmentation, encryption, and key management.
• Secure Kubernetes/EKS, serverless workloads, containers, and container images.
• Embed security controls and automated policy and misconfiguration checks into Terraform, CloudFormation, and CI/CD pipelines.
• Manage cloud identity and access through least-privilege roles, federation, and secrets management.
• Support CMMC Level 2 and NIST SP 800-171 compliance, security policies, documentation, evidence collection, and assessments.

Requirements

• 5+ years of experience in information security or security engineering roles.
• Deep hands-on cloud security experience with AWS and at least one of GCP or Azure, including IAM, VPC/networking, security groups, CloudTrail, GuardDuty, Config, and KMS.
• Experience with CSPM tooling and securing infrastructure-as-code and CI/CD pipelines.
• Familiarity with container and workload security, including Kubernetes, serverless, and image scanning.
• Experience with SIEM platforms such as Splunk, Sentinel, Elastic, or similar for log analysis and detection engineering.
• Strong cloud networking knowledge covering firewalls, proxies, DNS security, network segmentation, and packet analysis.
• Familiarity with NIST 800-171, CMMC, SOC 2, or ISO 27001.
• Excellent written and verbal communication skills for presenting risk and technical findings to engineers and leadership.
• Access to export-controlled information requires U.S. person status, eligibility without export authorization, or eligibility and a reasonable likelihood of obtaining the required authorization.

Nice to have

• Cloud security certifications such as AWS Security Specialty, GCP Professional Cloud Security Engineer, or Azure Security Engineer, or certifications such as CISSP or GIAC.
• Additional experience with Terraform, CloudFormation, and CI/CD pipeline security.
• Experience in environments subject to ITAR/EAR export control requirements.

Culture & Benefits

• Full-time employment with equity compensation.
• Medical, dental, and vision insurance, 401(k), disability and life insurance.
• Three weeks of paid vacation for new employees, 12 paid holidays, unlimited sick time, and paid parental leave.
• Commitment to equal employment opportunity, diversity, and reasonable accommodations during hiring.