Cloud Security Engineer

PlayOn is looking for a Cloud Security Engineer to secure our multi-cloud environment across Google Cloud Platform (GCP) and Amazon Web Services (AWS). You'll own the security posture of our cloud infrastructure, automate guardrails into our delivery pipelines, and help safely scale our adoption of enterprise AI services like Amazon Bedrock and Google Gemini Enterprise. This is a hands-on engineering role for someone who treats security as code, thinks in terms of detection and prevention rather than checklists, and wants to shape how a fast moving organization secures both traditional cloud workloads and emerging generative AI systems.

In this role, you can expect to

• Design, implement, and maintain security controls across GCP and AWS, including IAM, network segmentation, encryption, logging, and key management.
• Operate and tune CrowdStrike Falcon Cloud Security (CSPM) to continuously monitor cloud posture, triage misconfigurations, and drive remediation across accounts and projects.
• Run and extend Prowler assessments to benchmark environments against CIS, NIST, and internal standards, integrating findings into automated reporting and ticketing workflows.
• Build and maintain security infrastructure as code using Terraform, ensuring controls are versioned, peer-reviewed, and consistently applied across environments.
• Embed security into CI/CD pipelines through GitHub (Actions, branch protection, secret scanning, dependency review) so issues are caught before they reach production.
• Secure containerized workloads running on Amazon EKS, covering cluster hardening, RBAC, network policies, image scanning, and runtime protection.
• Define and enforce security guardrails for enterprise AI adoption, including data governance, access controls, prompt/output safeguards, and monitoring for Amazon Bedrock and Google Gemini Enterprise.
• Develop and design agentic security detection and response capabilities, with a focus on scaling existing processes leveraging AI.
• Investigate and respond to cloud security incidents, perform root-cause analysis, and lead improvements that prevent recurrence.
• Develop automation and tooling to reduce manual effort, improve detection coverage, and provide clear, actionable metrics to leadership.

To thrive in this role, you have

• 5+ years in cloud security, security engineering, or a closely related role.
• Hands-on experience securing both GCP and AWS in production environments.
• Strong working knowledge of Terraform and an infrastructure-as-code mindset.
• Proficiency with GitHub-based workflows and integrating security into CI/CD pipelines.
• Experience with cloud security posture management tooling such as CrowdStrike CSPM and Prowler.
• Practical experience securing Kubernetes, ideally Amazon EKS.
• Solid grasp of cloud IAM, networking, encryption, and logging fundamentals.
• Scripting ability in Python, Go, or a similar language for automation.
• Hands-on experience with SIEM platforms for log aggregation, detection, and security monitoring.

Nice to Have

• Experience securing or governing enterprise AI / LLM platforms such as Amazon Bedrock or Google Gemini Enterprise.
• Experience developing Agentic Security capabilities.
• Familiarity with security frameworks (CIS Benchmarks, NIST, SOC 2, ISO 27001).
• Detection engineering or threat-modeling experience.
• Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS Security Specialty, CKS, CISSP)

HOW YOU PLAY

• Ownership over Participation – You take responsibility for achieving holistic outcomes, prioritize key objectives, and adapt quickly when situations require a different approach. You follow through even against the toughest challenges.
• Team over Stars – You are a bridge builder, establishing processes and relationships with teams outside your own. You work to rally around common goals, find win-win solutions, compromise when necessary, and help others succeed.
• Growth over Comfort – You are driven by a desire to grow and actively seek opportunities to expand your comfort zone, skills, and confidence. You embrace new challenges with curiosity, accepting discomfort and failure as opportunities to learn.
• Fairness over Popularity – You approach decisions with a scientist’s mindset, challenging your assumptions and remaining objective. You consider long-term impact rather than relying on short-term gains, proactively seek others’ perspectives, and manage emotions in decision-making.