Cloud Security Engineer, Product Security

About the Position

Recorded Future is seeking a Cloud Security Engineer, Product Security to be a vital member of the Infrastructure part of the Product Security team dedicated to supporting all facets and functions of infrastructure Security across Recorded Future. This role is highly collaborative and technical, demanding a proactive approach to embedding security throughout the product development lifecycle and operational processes. The core mission is to safeguard our product infrastructure through a blend of preventative design, responsive investigation, and continuous improvement of security controls.

Responsibilities

• Design and Implement Security Solutions: Take ownership of designing, building, and deploying robust, scalable security solutions and infrastructure components. This involves selecting, configuring, and integrating security tools and technologies that enhance the overall security posture of our products and platform, ensuring security is "baked in," not "bolted on."
• Cloud Security Management: Secure our cloud environments by implementing and maintaining robust security controls, monitoring configurations, and ensuring compliance with best practices to protect our infrastructure.
• Security Architecture and Design Review: Serve as a security subject matter expert during the development process in our cloud environments. Conduct comprehensive security reviews, threat modeling, and risk assessments for all proposed new features, architectural changes, and major system updates. Provide actionable feedback to engineering teams to ensure designs meet stringent security standards and comply with internal policies and external regulations.
• Engineering Collaboration and Guidance: Work hand-in-hand with software engineers, DevOps teams, and product managers across the organization. You will offer expert security guidance, answer complex security-related questions, troubleshoot implementation issues, and mentor engineers on secure coding practices and security design principles, fostering a culture of security awareness.
• Product Security Team Participation: Contribute to the Product Security team's daily operational tasks, including maintaining security documentation, managing security-related tickets, participating in on-call rotations as required, and driving initiatives to improve team processes and efficiency.

Requirements

• 3+ years of proven relevant professional experience
• Strong cloud security knowledge, preferably AWS or GCP
• Strong foundational knowledge of security principles
• Solid Linux knowledge
• Kubernetes knowledge is a plus
• Background in coding/scripting is desired, preferably Go and/or Python
• A keen interest in finding and balancing security needs with developer productivity
• Excellent communication skills and the ability to effectively build relationships across different teams
• A strong ability to assess risks and make informed decisions
• Experience with Infrastructure-as-Code

We Offer

Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6-star user rating on G2 and more than 50% of Fortune 100 companies as customers.

About the Company

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles. By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.

Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.