Senior Security Engineer (Cloud)

About the Role

Abnormal AI is hiring a Senior Cloud Security Engineer to build and operate the security systems that protect our FedRAMP authorized environment. You will own secure delivery pipelines, infrastructure as code security, patch automation, identity controls, security telemetry, and incident response across a growing federal platform.
Your work will include creating policy gates for cloud deployments, automating patch and access workflows, strengthening identity controls, improving security telemetry, and generating audit evidence directly from engineering systems. You will work closely with DevInfra, FedOps, Product Security, Detection and Response, and Compliance to solve cloud security problems that cross traditional team boundaries. You will also use approved AI coding tools, such as Claude Code, to accelerate scripting, testing, documentation, and security automation.
Build and improve secure delivery workflows for applications and infrastructure deployed into the federal environment.
Create policy gates that evaluate infrastructure changes, security requirements, test results, and required approvals before deployment.
Integrate security scanning and control validation into delivery workflows so issues are identified early in the development process.
Review infrastructure as code changes that affect the federal boundary and help engineering teams resolve security risks before those changes reach production.
Build and maintain hardened system image pipelines that consistently apply approved configurations, security controls, and operating system updates.
Automate patch deployment across the environment, including testing, scheduling, rollout, validation, exception management, and compliance reporting.
Improve fleet visibility so teams can quickly identify systems that are missing patches, running unsupported software, or operating outside approved configurations.
Design and enforce identity and access controls across a complex cloud environment.
Strengthen cloud security through organization policies, identity controls, resource policies, and automated configuration checks.
Build preventive guardrails that block insecure or unauthorized configurations before they enter the federal environment.
Own the reliability of security logging and monitoring pipelines, including ingestion coverage, data quality, source health, retention, and alerting.
Tune security detections to improve signal quality, reduce unnecessary alerts, and focus responders on activity that requires investigation.
Partner with infrastructure, operations, product security, incident response, and compliance teams to solve security problems that cross team boundaries.
8+ years in cloud security engineering, DevSecOps, infrastructure security, or a closely related engineering discipline, including deep hands-on experience with AWS.
~ Strong experience building or securing cloud deployment pipelines and infrastructure as code workflows.
~ Proficiency in at least one scripting or programming language, preferably Python, with a record of automating recurring operational work.
~ Working knowledge of identity and access management design and enforcement in large cloud environments.
~ Production experience with security monitoring and incident response, including investigation, containment, recovery, and operational follow through.

Experience integrating security automation into CI/CD pipelines and SecOps workflows.
Knowledge of SaaS security operations and monitoring at scale.
Experience driving automation in security operations, compliance tracking, and evidence management.
Knowledge of SaaS security operations and modern cloud environments; exposure to DevSecOps pipelines or security reviews for Terraform/containers.
Experience with FedRAMP, DoD IL4, DoD IL5, government, or another highly regulated cloud environment, including support for 3PAO assessments or federal audits.
Familiarity with NIST SP 800-53 controls, continuous monitoring, security impact analysis, and technical evidence requirements.
Experience building compliance automation, continuous control monitoring, or automated evidence management capabilities.

#In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.
A note on AI in our process:
Abnormal AI uses AI-assisted tools to help our recruiting team prepare for candidate interviews. These tools analyze resume content and role requirements to suggest interview questions and areas for the interviewer to explore.Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and Abnormal AIs policies relevant to our security and privacy standards.
Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please

click here

.