Security Engineer

**About the Company** Ambient combines a decade of operational experience with design and engineering prowess to improve apartment living and management in the most impactful, cost-effective way possible. The name "Ambient" embodies our vision to create a category-defining platform that seamlessly integrates smart technology into the built environment and transforms the way people live, visit, and work in multifamily communities. Our focus is on increasing the value of multifamily properties by making them more efficient to operate and more comfortable to live in. **About the Role** We're looking for a Security Engineer with a strong background in cloud security to work with our engineering team on a contract basis. We look for strategic thinkers and creative problem solvers with a bias for execution. **Key Responsibilities** - **Security as Code**: Implement security best practices within **Infrastructure as Code (IaC)** using **Terraform** for AWS-based environments. - **Secrets Management**: Implement and maintain **HashiCorp Vault, AWS KMS, and AWS Secrets Manager** for secure storage and retrieval of secrets. - **Shift Left Security**: Integrate security early in the **CI/CD pipelines** using static code analysis, vulnerability scanning, and compliance checks. - **Vulnerability & Application Security Testing**: Automate security scanning tools like **Snyk, Trivy, Checkov, Veracode, SonarQube**, or similar solutions. - **Automation & Scripting**: Develop automation scripts in **Python, Bash, or other scripting languages** to streamline security processes. - **Monitoring & Compliance**: Set up security monitoring, logging, audting and alerting for compliance with **SOC2, ISO 27001, and CIS benchmarks**. - **Collaboration & Documentation**: Work closely with **DevOps, Security, and Engineering teams** to define security guidelines and document security processes. **Required Skills & Qualifications** - **7-10 years of experience** in DevSecOps, Security Engineering, or related fields. - Expertise in **Terraform** for IaC and managing AWS infrastructure securely. - Strong hands-on experience with **Amazon EKS** and securing Kubernetes environments. - Proficiency with **HashiCorp Vault, AWS KMS, and AWS Secrets Manager** for secret management. - Strong understanding of **CI/CD pipelines** and security automation using **GitHub Actions**. - Proficiency in **Python, Bash, or other scripting languages** for automation. - Experience deploying **EDR/MDR/CNAPP** tools and providing threat detection and mitigation strategies. - Knowledge of **compliance frameworks** (SOC2, ISO 27001, NIST, CIS benchmarks) is a plus. - Strong problem-solving skills and the ability to work in a fast-paced environment. **Preferred Qualifications** - Experience with **AWS Security Hub, Alertlogic, GuardDuty, Cloudtrail, IAM policies and Crowdstrike, Wiz, and CloudTrail** for security monitoring. - Knowledge of **policy-as-code** tools like **OPA (Open Policy Agent)** for enforcing security policies. - Actively worked on a compliance initiative like SOC 2 - Familiarity with **DevSecOps toolchains** and threat modeling practices. **_ Ambient Property Technologies Inc. is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, disability or genetic information, sex, sexual orientation, gender identity, or national origin._** **_ A note to recruitment agencies: Please don't reach out to Ambient employees or leaders about our roles - we've got recruiting covered. We don't accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes. Thank you for your understanding._** ambient #no-promote