Cloud Security Engineer

About this role

Polymarket seeks a Cloud Security Engineer to design and enforce security controls across their AWS infrastructure, embedding security into infrastructure-as-code and reducing risk without slowing development. You'll own the security posture of a high-volume prediction market platform, managing cloud telemetry, threat detection, and compliance while partnering closely with engineering teams.

What you'll do

• Own AWS security posture including IAM policies, SCPs, VPC segmentation, and account-level baselines across multiple accounts and regions
• Design and integrate security controls into infrastructure-as-code modules and automated deployment pipelines with policy-as-code validation
• Manage cloud security telemetry from CloudTrail, GuardDuty, Security Hub, Config Rules, and VPC Flow Logs
• Develop detection logic for cloud-specific threats and support incident response investigations with the SOC team
• Govern secrets management via AWS Secrets Manager and SSM Parameter Store, including KMS key policies and rotation
• Remediate findings from AWS Inspector, Security Hub, and CSPM tools while maintaining CIS AWS Foundations benchmarks

What they're looking for

• AWS security services (IAM, SCP, GuardDuty, Security Hub, CloudTrail, Config, KMS, WAF, Inspector, VPC)
• Infrastructure as Code (Terraform, Pulumi, CDK)
• AWS networking and misconfiguration attack surface analysis
• Python, TypeScript, or Go scripting and automation
• Cloud threat detection and incident response
• Secrets management and encryption patterns
• SOC 2 and PCI-DSS compliance requirements
• Security architecture review and risk communication

Benefits

• Competitive salary and equity
• Unlimited PTO
• Full health, vision, and dental coverage
• 401(k) match
• Hardware: new MacBook Pro, large display, and accessories