Cloud Security Engineer

Job Description

Employment Type: Full-time Location: Minneapolis, MN

Who we are:

Field Nation brings companies and service professionals together through an integrated, easy-to-use platform. We support businesses looking to grow their service offerings while also empowering technicians to leverage their skills on their own terms. Our mission is to help the service delivery industry do great work, and we live that mission by doing great work for the companies and service professionals that depend on us.

Why is this role important to Field Nation?

You'll be at the forefront of securing our cloud-native environment, primarily within Amazon Web Services (AWS), with a strong focus on integrating security into development workflows (DevSecOps) and building robust security capabilities. This is an exciting opportunity to make a real impact in a fast-paced, high-growth environment where innovation and collaboration are encouraged. Our customers trust Field Nation for their most critical business operations, and we're committed to providing a secure and reliable platform. Our Information Security team is dedicated to safeguarding our systems and data against emerging cyber threats. Your work will directly protect our platform and our customers, ensuring we continue to deliver exceptional value in a secure environment.

This position reports to the Director of Information Security.

What you'll get to do:

• Innovate & Automate Security: Lead efforts to identify opportunities for automation, designing and building new security capabilities and tools that streamline our operations and enhance our defensive posture. You'll leverage a robust suite of Generative AI tools to accelerate these initiatives.
• Build and Secure Cloud Infrastructure: Design, build, and maintain secure, scalable, and automated AWS cloud infrastructure, ensuring it meets industry best practices. This includes using Infrastructure-as-Code (IaC) tools like Terraform to embed security from day one.
• Integrate Security into IaC DevOps Pipelines: Lead integration of security practices into our DevOps pipelines, ensuring strong security controls are present throughout the entire development lifecycle, especially for IaC management.
• Manage Cloud Access: Optimize AWS Identity and Access Management (IAM) to enforce the principle of least privilege, ensuring secure access to all cloud resources.
• Implement Network Security: Design and implement secure network configurations within AWS, including Virtual Private Clouds (VPCs) and security groups. You'll also help administer and maintain network security solutions like our secure web gateway and zero trust network access.
• Support Incident Response: Assist in responding to cybersecurity alerts and incidents, focusing on rapid detection, analysis, containment, and recovery.
• Be a Security Advocate: Serve as a security advocate and educator within our broader engineering organization.
• Stay Ahead of Threats: Keep up-to-date on emerging threats and attack vectors to continuously enhance our defenses.

You might be a good fit if you have:

• Education: Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Experience:
  • A minimum of 3 years of hands-on experience securing cloud infrastructure, specifically AWS, in a production environment.
  • AWS Security Expertise: A strong understanding of core AWS security services and architecture (e.g., IAM, GuardDuty, CloudTrail, Firewall, Security Hub).
  • Infrastructure as Code (IaC): Solid practical experience with Terraform for building and maintaining secure cloud infrastructure, ideally with 3+ years of experience.
  • Container Security: Demonstrated proficiency with Kubernetes security (including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management) and familiarity with Docker.
  • DevOps & CI/CD Security: Experience with CI/CD tools such as GitHub Actions.