Senior Cloud Security Engineer - Remote Position

About the Role

We are seeking a Senior Cloud Security Engineer to join our team at Flo Health. As a leader in women's health technology with over 500 million downloads, Flo is committed to building a better future for female health. This Senior Cloud Security Engineer remote position is crucial in ensuring that our cloud infrastructure remains secure, enabling our engineers to ship fast without compromising user trust.

What You'll Do

• Embed security, compliance, and best practices into our core stack, making them invisible to developers.
• Automate security processes across infrastructure, CI/CD pipelines, and container lifecycles, driving security-as-code initiatives.
• Own and continuously strengthen Flo’s AWS security posture using tools like GuardDuty, Inspector, and Security Hub.
• Harden container image security end-to-end, patching vulnerabilities automatically and enforcing policies at admission.
• Manage CI/CD security across the organization using policy-as-code tooling, ensuring standards are enforced programmatically.
• Build visibility into security performance by measuring and visualizing actionable metrics.
• Support the infrastructure for industry-leading privacy features, such as our TIME-recognized “Anonymous Mode.”
• Shape Flo’s broader security culture through proactive engagement and cross-team collaboration.

Requirements

• 7+ years of experience in Infrastructure Security, Cloud Security, or Security Engineering roles.
• Deep expertise in AWS security services and best practices.
• Proficient in Terraform and Terragrunt, running everything as code.
• Strong knowledge of Kubernetes security and image hardening.
• Solid understanding of identity management principles including SSO, OAuth, and JWT.
• Comfortable scripting in Python, Bash, or similar to automate security workflows.
• Understanding of modern network security principles and their practical application.
• Experience building Secure Software Development Lifecycle phases into engineering workflows.

Nice to Have

• Experience with security monitoring and event correlation systems.
• Knowledge of Zero Trust Architecture.
• Familiarity with secret management processes and tools.
• Experience in multi-cloud environments (AWS and preferably GCP).
• Professional accreditations such as AWS Security Specialty, CKS, or CISSP.

What We Offer

• Competitive salary and annual reviews.
• Opportunity to participate in Flo’s performance incentive scheme.
• Paid holiday, sick leave, and female health leave.
• Enhanced parental leave and pay for all parents.
• Accelerated professional growth through world-changing work.
• In-person collaboration in a hybrid model, with 3 days per week in the office.
• 5-week fully paid sabbatical at 5-year Floversary.
• Health, pension, and wellbeing perks.