Senior Security Engineer

• Abnormal AI is hiring a Senior Cloud Security Engineer to build and operate the security systems that protect our FedRAMP authorized environment
• You will own secure delivery pipelines, infrastructure as code security, patch automation, identity controls, security telemetry, and incident response across a growing federal platform
• You will design and build the capabilities that allow this environment to scale safely
• Your work will include creating policy gates for cloud deployments, automating patch and access workflows, strengthening identity controls, improving security telemetry, and generating audit evidence directly from engineering systems
• You will have meaningful ownership of both architecture and operational results, with the opportunity to replace repetitive work with reliable automation across the environment
• You will work closely with DevInfra, FedOps, Product Security, Detection and Response, and Compliance to solve cloud security problems that cross traditional team boundaries
• You will also use approved AI coding tools, such as Claude Code, to accelerate scripting, testing, documentation, and security automation
• Build and improve secure delivery workflows for applications and infrastructure deployed into the federal environment
• Create policy gates that evaluate infrastructure changes, security requirements, test results, and required approvals before deployment
• Integrate security scanning and control validation into delivery workflows so issues are identified early in the development process
• Review infrastructure as code changes that affect the federal boundary and help engineering teams resolve security risks before those changes reach production
• Design automation that produces change records, approval history, test results, and required evidence directly from engineering workflows
• Build and maintain hardened system image pipelines that consistently apply approved configurations, security controls, and operating system updates
• Automate patch deployment across the environment, including testing, scheduling, rollout, validation, exception management, and compliance reporting
• Improve fleet visibility so teams can quickly identify systems that are missing patches, running unsupported software, or operating outside approved configurations
• Design and enforce identity and access controls across a complex cloud environment
• Strengthen cloud security through organization policies, identity controls, resource policies, and automated configuration checks
• Build preventive guardrails that block insecure or unauthorized configurations before they enter the federal environment
• Own the reliability of security logging and monitoring pipelines, including ingestion coverage, data quality, source health, retention, and alerting
• Develop automated checks that identify missing telemetry, delayed events, broken integrations, and other conditions that could reduce security visibility
• Tune security detections to improve signal quality, reduce unnecessary alerts, and focus responders on activity that requires investigation
• Build response automation that gathers context, enriches alerts, preserves evidence, and accelerates investigation and containment
• Lead security incident response for the federal environment, including investigation, containment, recovery, evidence preservation, and after action reporting
• Partner with infrastructure, operations, product security, incident response, and compliance teams to solve security problems that cross team boundaries

Benefits

• Healthcare
• Flexible PTO
• 401k
• One Medical
• Flexible Spending Account
• Mental Health Resources
• Home Office Stipend
• Monthly Internet & Phone Stipend
• Health and Wellness Stipend

• 8+ years in cloud security engineering, DevSecOps, infrastructure security, or a closely related engineering discipline, including deep hands-on experience with AWS
• Proficiency in at least one scripting or programming language, preferably Python, with a record of automating recurring operational work
• Production experience with security monitoring and incident response, including investigation, containment, recovery, and operational follow through
• Strong experience building or securing cloud deployment pipelines and infrastructure as code workflows
• Working knowledge of identity and access management design and enforcement in large cloud environments
• Experience integrating security automation into CI/CD pipelines and SecOps workflows
• Prior experience supporting federal audits or 3PAO engagements
• Knowledge of SaaS security operations and monitoring at scale
• Knowledge of SaaS security operations and modern cloud environments; exposure to DevSecOps pipelines or security reviews for Terraform/containers
• Experience driving automation in security operations, compliance tracking, and evidence management
• Experience with FedRAMP, DoD IL4, DoD IL5, government, or another highly regulated cloud environment, including support for 3PAO assessments or federal audits
• Familiarity with NIST SP 800-53 controls, continuous monitoring, security impact analysis, and technical evidence requirements
• Experience building compliance automation, continuous control monitoring, or automated evidence management capabilities