Senior Security Engineer - Cloud
About the Role
Muon seeks a Senior Security Engineer to join our Security Engineering & IT team. The ideal candidate brings deep expertise across multiple security domains and can operate independently to protect Muon’s infrastructure, data, and people. You will own and advance our security posture across endpoints, networks, multi-cloud environments (AWS, GCP, and Azure), and identity systems while contributing to compliance efforts including NIST 800-171 and ITAR/EAR requirements. Cloud security is a core focus of this role: you will lead cloud security posture management, secure cloud architecture, and workload protection across our AWS, GCP, and Azure environments.
This position is hybrid and requires working on-site in our San Jose, CA office three days per week or fully remote from an approved U.S. location.
Responsibilities
Drive cloud security posture management (CSPM) across AWS, GCP, and Azure environments, including IAM policies, S3/bucket security, security group and network reviews, and CloudTrail/GuardDuty/Config monitoring
Architect secure, scalable cloud environments — landing zones, account and organization structure, network segmentation, encryption, and key management
Secure cloud workloads and containers, including Kubernetes/EKS, serverless functions, and container image scanning
Embed security into infrastructure-as-code and CI/CD pipelines (Terraform, CloudFormation) with automated policy and misconfiguration checks
Manage cloud identity and access — least-privilege roles, federation, and secrets management across cloud platforms
Support CMMC Level 2 and NIST SP 800-171 compliance — maintain SSP control narratives, collect evidence, and prepare for assessments
Contribute to security policy development and keep documentation current as the environment evolves
Qualifications
5+ years of experience in information security or security engineering roles
Deep, hands-on cloud security experience across AWS and at least one of GCP or Azure (IAM, VPC/networking, security groups, CloudTrail, GuardDuty, Config, and KMS)
Experience with cloud security posture management (CSPM) tooling and securing infrastructure-as-code and CI/CD pipelines
Familiarity with container and workload security (Kubernetes, serverless, image scanning)
Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and detection engineering
Solid cloud networking knowledge — firewalls, proxies, DNS security, network segmentation, packet analysis
Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001
Excellent written and verbal communication skills — able to convey risk and technical findings to both engineers and leadership
Nice-to-Have Skills
Relevant cloud security certifications (AWS Security Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer) or general security certifications (CISSP, GIAC, or similar)
Experience with infrastructure-as-code security (Terraform, CloudFormation) and CI/CD pipeline security
Background in environments subject to ITAR/EAR export control requirements
Salary
The salary range for this role is $193,000 - $218,000, plus a competitive equity grant and comprehensive benefits package. Final compensation will be determined based on skills, qualifications, experience, and geographic location as assessed during the interview process.