EngineeringOn-site

Security Engineer, Cloud Security

Saronic Technologies · On-site

Apply

Last seen by MeritLog September 8, 2026Source: AshbySource version: ashby-public-job-posting-v1

MeritLog read this listing from Saronic Technologies's Ashby job board and last checked it on September 8, 2026.

Source: the employer's Ashby job board. Open the original listing for current details.

Job details

Work model: On-site
Salary: Not listed by source
Location: Austin, TX

Hiring context

How this role compares at Saronic Technologies

Saronic Technologies has 194 live roles in MeritLog’s catalog across 11 job families, and 114 of them are in engineering. 0 of those listings publish a pay range, a disclosure rate of 0%.

Saronic Technologies concentrates this hiring in:

Counted across the job boards MeritLog tracks, at the time this page was served. Pay comparisons use only listings that publish a complete range in the same currency and period.

What the role asks for

What you'd do

Posture & Compliance: Own continuous cloud security posture management (CSPM) across all cloud accounts, detect misconfigurations and drift, and drive remediation with the teams that own the resources. Map technical controls to both government and commercial frameworks (CMMC, NIST SP 800-171, FedRAMP/IL baselines) and keep controls evidence current and audit-ready.
Cloud Vulnerability Management: Run cloud vulnerability management at scale, find issues, prioritize them by real attack path and exposure rather than raw CVSS, and drive remediation to closure. Use tooling such as Prowler and a CNAPP, and automate remediation wherever possible.
Guardrails & Secure-by-Default: Build reusable Terraform modules, Service Control Policies, permission boundaries, and policy-as-code that make the secure path the easy path, so whole classes of misconfiguration disappear before they reach production. Replace manual security gates with automated, self-service guardrails.
Identity, Secrets & Data Protection: Design least-privilege IAM across accounts and workloads, hunt privilege-escalation and cross-account trust paths, govern secrets management, and standardize encryption and key-management patterns.

What they're asking for

3+ years of hands-on cloud security, infrastructure security, or DevSecOps experience, or an equivalent combination of experience and demonstrated abilityExperience
Depth in AWS security services and architecture (IAM, Organizations/SCPs, CloudTrail, Config, GuardDuty, Security Hub, KMS, VPC)Skill
Strong infrastructure-as-code (Terraform) and policy-as-code experienceSkill
Hands-on cloud vulnerability management and CSPM tooling (e.g., Prowler), with a track record of driving cloud findings to remediationSkill
A track record of building guardrails or patterns that other teams adopted without frictionSkill
Proficiency in scripting for security automationSkill
Ability to obtain and maintain a U.S. security clearanceCredential
Prolonged periods of sitting at a desk and working on a computerSkill
Occasional standing and walking within the officeSkill
Manual dexterity to operate a computer keyboard, mouse, and other office equipmentSkill
Visual acuity to read screens, documents, and reportsSkill
Occasional reaching, bending, or stooping to access file drawers, cabinets, or office suppliesSkill
Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)Skill
Experience in AWS GovCloud, FedRAMP, or IL4/IL5 environmentsSkillPreferred
Azure and on-prem security experience a plusSkillPreferred
Multi-account landing-zone and organizational security designSkillPreferred
CSPM with automated remediation at scaleSkillPreferred
Container or Kubernetes securitySkillPreferred
IAM attack-path analysis and outcome-based metricsSkillPreferred
Familiarity with NIST SP 800-171/800-53SkillPreferred
Experience in defense, aerospace, robotics, or other high-assurance environmentsSkillPreferred

Parsed by MeritLog from the employer’s own posting. The full description follows below.

Job description

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms. JOB OVERVIEW Security at Saronic is a force multiplier, not a blocker. We’re looking for a Security Engineer for our Cloud Security team to own the continuous security posture of the cloud that runs an autonomous fleet across both commercial AWS and AWS GovCloud and to build the guardrails that let every team ship fast with security baked in from the start. You’ll design the secure-by-default patterns teams reach for on their own, treating repeat findings as a signal to build a control rather than re-answer a ticket, and prioritizing by real attack path rather than alert count. You’ll work alongside Product Security, Infrastructure, Software, Information Technology, Enterprise Technology, and Internal Applications to keep a multi-account cloud environment secure, compliant, and auditable across its full lifecycle. This is an opportunity to own cloud security posture across commercial and GovCloud, build guardrails that speed engineering up rather than slow it down, turn compliance into automated and continuous evidence, and work with strong engineers in a high-trust, low-ego environment. RESPONSIBILITIES - Posture & Compliance: Own continuous cloud security posture management (CSPM) across all cloud accounts, detect misconfigurations and drift, and drive remediation with the teams that own the resources. Map technical controls to both government and commercial frameworks (CMMC, NIST SP 800-171, FedRAMP/IL baselines) and keep controls evidence current and audit-ready. - Cloud Vulnerability Management: Run cloud vulnerability management at scale, find issues, prioritize them by real attack path and exposure rather than raw CVSS, and drive remediation to closure. Use tooling such as Prowler and a CNAPP, and automate remediation wherever possible. - Guardrails & Secure-by-Default: Build reusable Terraform modules, Service Control Policies, permission boundaries, and policy-as-code that make the secure path the easy path, so whole classes of misconfiguration disappear before they reach production. Replace manual security gates with automated, self-service guardrails. - Identity, Secrets & Data Protection: Design least-privilege IAM across accounts and workloads, hunt privilege-escalation and cross-account trust paths, govern secrets management, and standardize encryption and key-management patterns. - Detection, Response & SOC Support: Build and tune cloud-native detections (CloudTrail, GuardDuty, Config, Security Hub) and automated remediation, and support the Security Operations team as they investigate, triage, and remediate cloud-related cases across our infrastructure, including credential compromise, exposed resources, and data exfiltration, reconstructing activity from logs and automating containment. Feed every incident back into new guardrails and detections. QUALIFICATIONS - 3+ years of hands-on cloud security, infrastructure security, or DevSecOps experience, or an equivalent combination of experience and demonstrated ability - Depth in AWS security services and architecture (IAM, Organizations/SCPs, CloudTrail, Config, GuardDuty, Security Hub, KMS, VPC) - Strong infrastructure-as-code (Terraform) and policy-as-code experience - Hands-on cloud vulnerability management and CSPM tooling (e.g., Prowler), with a track record of driving cloud findings to remediation - A track record of building guardrails or patterns that other teams adopted without friction - Proficiency in scripting for security automation - Ability to obtain and maintain a U.S. security clearance PHYSICAL DEMANDS - Prolonged periods of sitting at a desk and working on a computer - Occasional standing and walking within the office - Manual dexterity to operate a computer keyboard, mouse, and other office equipment - Visual acuity to read screens, documents, and reports - Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies - Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages) PREFERRED QUALIFICATIONS - Experience in AWS GovCloud, FedRAMP, or IL4/IL5 environments - Azure and on-prem security experience a plus - Multi-account landing-zone and organizational security design - CSPM with automated remediation at scale - Container or Kubernetes security - IAM attack-path analysis and outcome-based metrics - Familiarity with NIST SP 800-171/800-53 - Experience in defense, aerospace, robotics, or other high-assurance environments BENEFITS Medical Insurance: Comprehensive health insurance plans covering a range of services Saronic pays 100% of the premium for employees and 80% for dependents Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents Time Off: Generous PTO and Holidays Parental Leave: Paid maternity and paternity leave to support new parents Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses Retirement Plan: 401(k) plan with company match Stock Options: Equity options to give employees a stake in the company’s success Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office Saronic CCPA Notice for Candidates and California Employees https://saronic-assets-public.s3.us-east-2.amazonaws.com/Saronic%20CCPA%20Notice%20for%20Candidates%20and%20California%20Employees.pdf If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3) https://www.govinfo.gov/link/uscode/8/1324b. Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.

Keep exploring

More Engineering roles

Search all jobs