# Cloud Security Engineer

[Sandtechholdingslimited](https://gurify.com/jobs?q=Sandtechholdingslimited) · United States · Posted 3 days ago

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.eu.greenhouse.io/sandtechholdingslimited/jobs/5027944101)

## Job description

### About Sand

Sand Technologies is a global Physical AI company using data and AI to make critical industries work better. We partner with governments, cities and enterprises to improve how essential systems operate across healthcare, water, energy, telecommunications and infrastructure.

Our work delivers proven real-world impact. We have built AI systems that help manage London’s water supply, supported telecom network planning across hundreds of cities, and developed digital healthcare platforms serving tens of millions of people across Africa. From intelligent command centers to AI-powered infrastructure platforms, we help organizations sense, analyze and act in complex environments.

Our people are ambitious, curious and relentlessly practical. Our teams work alongside clients in the field, solving hard problems and deploying solutions that last. With colleagues across Africa, Europe, the UK and the US, we operate across the full stack - from research and engineering to deployment and capability building.

Our mission is simple: to harness AI to solve humanity’s most pressing challenges.

### About the role

Sand Technologies is standing up its security engineering capability, and you'll be engineer #1, working directly with the Director of Cyber Security. We are looking for a candidate with subject matter expertise in implementation and management of cloud security across AWS, Azure, and GCP.

This is a hands-on role, with an opportunity to have a deep impact on audits, executive metrics, and the security of a live AI product. Most junior security roles are ticket queues. This one is a program build: you'll touch three clouds, a modern Microsoft security stack, audit evidence for four frameworks, and the security posture of a shipping AI product — with direct mentorship from a security director and visible impact into executive reporting from your first quarter.

### What you’ll do

- Serve as second responder on security incidents across Sand: fraud, phishing, endpoint, identity, shadow IT, and cloud, running evidence collection, triage, containment coordination, and lessons learned

- Operate and tune our security stack: Microsoft Defender for Cloud/Endpoint, Intune, Sentinel, and vulnerability scanning across a multi-account AWS organization, GCP, and Azure

- Build and maintain the vulnerability data pipeline: raw exports from cloud-native tools, deduplication by unique CVE, finding-age and SLA computation, and the feeds behind our security metrics

- Run tooling validations — side-by-side parity testing when we transition platforms, with evidence that stands up to audit

- Partner with infrastructure/DevOps teams on remediation: container base-image hygiene, registry lifecycle policies, exposure management, and verifying closure on the next scan

- Track remediation SLAs, support exception and risk-acceptance workflows, and keep runbooks and process documentation current

- Build detection in Microsoft Sentinel: onboarding and tuning log sources across email, identity, endpoint, SaaS, and cloud

- Embed security gates in CI/CD pipelines and stand up telemetry for new environments

- Contribute evidence to Cyber Essentials, ISO 27001, SOC 2, and ISO/IEC 42001 readiness workstreams

- In your first 90 days you will:

- Own the weekly vulnerability data pipeline end-to-end (exports → dedup → SLA math → metrics feed)

- Complete one tooling parity validation with documented, audit-ready evidence

- Ship one structural remediation with the infrastructure team (e.g., registry lifecycle policies) and verify closure by scan

- Stand up telemetry on one new cloud environment from zero

- Step into the second-responder seat: run one incident or tabletop end to end, with documented lessons fed back into the runbooks

### Who you are

- grounded by at least 5-7 years of professional cloud/DevOps experience and at least 2–4 years in security engineering, cloud/DevOps with a security focus, or security operations

- Working proficiency in at least one major cloud (AWS, Azure, or GCP) and hunger to learn the other two

- Scripting for automation — Python preferred; comfort with REST APIs and structured data (JSON/CSV); KQL or SQL a plus

- Understanding of vulnerability management fundamentals (CVE/CVSS, scanning vs. remediation, SLA-driven programs) and a calm, methodical approach to incident response

- Clear writing and the ability to explain a finding to an engineer and its risk to an executive

- Self-direction — you'll have a director's guidance, not a script

##

### Preferred experience

- Hands-on time with Microsoft Defender / Sentinel, or Qualys

- Terraform or other infrastructure-as-code exposure

- Container security (ECR/AKS image scanning, lifecycle policies)

- Cyber Essentials, ISO 27001, SOC 2, or ISO/IEC 42001 evidence experience

- Relevant certifications: SC-200, AZ-500, Security+ (or equivalent demonstrated skill)

### How we work

Due to the highly collaborative and internationally distributed nature of our work, successful candidates must be comfortable operating in small teams while contributing to larger, globally coordinated efforts. A strong sense of ownership, self-motivation and discipline in maintaining clear and consistent communication through virtual collaboration tools and video conferencing is essential.

**Live in Sandtechholdingslimited’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- CO [Senior Security Operations Engineer](https://gurify.com/job/senior-security-operations-engineer-at-cohere-2a46814dc003) Cohere · United States · last week
- PI [Staff Security Software Engineer, Detection & Response](https://gurify.com/job/staff-security-software-engineer-detection-response-at-pinterest-351c6488705e) Pinterest · Seattle, WA · 3 days ago
- CH [Senior Product Security Engineer](https://gurify.com/job/senior-product-security-engineer-at-chaosindustries-7bf2e814039b) Chaosindustries · El Segundo, United States · 2 weeks ago
- CH [Product Security Engineer](https://gurify.com/job/product-security-engineer-at-chaosindustries-b3ad93988901) Chaosindustries · El Segundo, United States · 2 weeks ago
- B2 [Enterprise Security Engineer - R01573019](https://gurify.com/job/enterprise-security-engineer-r01573019-at-brillio-2-d82b31668b10) Brillio 2 · New York, United States · 2 weeks ago
- AU [Data Security Engineer](https://gurify.com/job/data-security-engineer-at-audaxgroup-eae419783b57) Audaxgroup · Boston, MA · 5 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Cloud Security Engineer","description":"\u003Ch3\u003EAbout Sand\u003C/h3\u003E\u003Cp\u003ESand Technologies is a global Physical AI company using data and AI to make critical industries work better. We partner with governments, cities and enterprises to improve how essential systems operate across healthcare, water, energy, telecommunications and infrastructure.\u003C/p\u003E\u003Cp\u003EOur work delivers proven real-world impact. We have built AI systems that help manage London\u2019s water supply, supported telecom network planning across hundreds of cities, and developed digital healthcare platforms serving tens of millions of people across Africa. From intelligent command centers to AI-powered infrastructure platforms, we help organizations sense, analyze and act in complex environments.\u003C/p\u003E\u003Cp\u003EOur people are ambitious, curious and relentlessly practical. Our teams work alongside clients in the field, solving hard problems and deploying solutions that last. With colleagues across Africa, Europe, the UK and the US, we operate across the full stack - from research and engineering to deployment and capability building.\u003C/p\u003E\u003Cp\u003EOur mission is simple: to harness AI to solve humanity\u2019s most pressing challenges.\u003C/p\u003E\u003Ch3\u003EAbout the role\u003C/h3\u003E\u003Cp\u003ESand Technologies is standing up its security engineering capability, and you\u0026#39;ll be engineer #1, working directly with the Director of Cyber Security. We are looking for a candidate with subject matter expertise in implementation and management of cloud security across AWS, Azure, and GCP.\u003C/p\u003E\u003Cp\u003EThis is a hands-on role, with an opportunity to have a deep impact on audits, executive metrics, and the security of a live AI product. Most junior security roles are ticket queues. This one is a program build: you\u0026#39;ll touch three clouds, a modern Microsoft security stack, audit evidence for four frameworks, and the security posture of a shipping AI product \u2014 with direct mentorship from a security director and visible impact into executive reporting from your first quarter.\u003C/p\u003E\u003Ch3\u003EWhat you\u2019ll do\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EServe as second responder on security incidents across Sand: fraud, phishing, endpoint, identity, shadow IT, and cloud, running evidence collection, triage, containment coordination, and lessons learned\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOperate and tune our security stack: Microsoft Defender for Cloud/Endpoint, Intune, Sentinel, and vulnerability scanning across a multi-account AWS organization, GCP, and Azure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild and maintain the vulnerability data pipeline: raw exports from cloud-native tools, deduplication by unique CVE, finding-age and SLA computation, and the feeds behind our security metrics\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERun tooling validations \u2014 side-by-side parity testing when we transition platforms, with evidence that stands up to audit\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with infrastructure/DevOps teams on remediation: container base-image hygiene, registry lifecycle policies, exposure management, and verifying closure on the next scan\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETrack remediation SLAs, support exception and risk-acceptance workflows, and keep runbooks and process documentation current\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild detection in Microsoft Sentinel: onboarding and tuning log sources across email, identity, endpoint, SaaS, and cloud\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEmbed security gates in CI/CD pipelines and stand up telemetry for new environments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EContribute evidence to Cyber Essentials, ISO 27001, SOC 2, and ISO/IEC 42001 readiness workstreams\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIn your first 90 days you will:\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwn the weekly vulnerability data pipeline end-to-end (exports \u2192 dedup \u2192 SLA math \u2192 metrics feed)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EComplete one tooling parity validation with documented, audit-ready evidence\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EShip one structural remediation with the infrastructure team (e.g., registry lifecycle policies) and verify closure by scan\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStand up telemetry on one new cloud environment from zero\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStep into the second-responder seat: run one incident or tabletop end to end, with documented lessons fed back into the runbooks\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWho you are\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003Egrounded by at least 5-7 years of professional cloud/DevOps experience and at least 2\u20134 years in security engineering, cloud/DevOps with a security focus, or security operations\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking proficiency in at least one major cloud (AWS, Azure, or GCP) and hunger to learn the other two\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EScripting for automation \u2014 Python preferred; comfort with REST APIs and structured data (JSON/CSV); KQL or SQL a plus\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EUnderstanding of vulnerability management fundamentals (CVE/CVSS, scanning vs. remediation, SLA-driven programs) and a calm, methodical approach to incident response\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EClear writing and the ability to explain a finding to an engineer and its risk to an executive\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESelf-direction \u2014 you\u0026#39;ll have a director\u0026#39;s guidance, not a script\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E##\u003C/p\u003E\u003Ch3\u003EPreferred experience\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHands-on time with Microsoft Defender / Sentinel, or Qualys\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETerraform or other infrastructure-as-code exposure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EContainer security (ECR/AKS image scanning, lifecycle policies)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECyber Essentials, ISO 27001, SOC 2, or ISO/IEC 42001 evidence experience\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERelevant certifications: SC-200, AZ-500, Security\u002B (or equivalent demonstrated skill)\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EHow we work\u003C/h3\u003E\u003Cp\u003EDue to the highly collaborative and internationally distributed nature of our work, successful candidates must be comfortable operating in small teams while contributing to larger, globally coordinated efforts. A strong sense of ownership, self-motivation and discipline in maintaining clear and consistent communication through virtual collaboration tools and video conferencing is essential.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"cloud-security-engineer-at-sandtechholdingslimited-c04b7d1e3937"},"url":"https://gurify.com/job/cloud-security-engineer-at-sandtechholdingslimited-c04b7d1e3937","datePosted":"2026-11-10","validThrough":"2026-12-28T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Sandtechholdingslimited","sameAs":"https://job-boards.eu.greenhouse.io/sandtechholdingslimited"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"US"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United States","item":"https://gurify.com/jobs/united-states"},{"@type":"ListItem","position":3,"name":"Cloud Security Engineer","item":"https://gurify.com/job/cloud-security-engineer-at-sandtechholdingslimited-c04b7d1e3937"}]}
```