← All roles

Staff Cloud Security Engineer

Xometry· IT & Security
Apply on company site
Waltham, MA$180k - $200kfull-timePosted 3mo ago

About the role

Senior individual contributor focused on cloud security posture, runtime detection, and threat detection architecture for a cloud-native environment. Owns CrowdStrike, evaluates SIEM migration, and defines how threats are detected and responded to in a SaaS-first, AWS-centric stack.

Responsibilities

  • Own CrowdStrike Falcon configuration, ensuring policies are appropriately scoped, tuned, and generating actionable alerts.
  • Partner with MDR to define alert routing, triage thresholds, and escalation logic, ensuring the right signals reach the right team.
  • Monitor cloud environments (primarily AWS) for security posture drift: misconfigured IAM roles, overly permissive security groups, exposed storage, and non-compliant resource configurations.
  • Secure Kubernetes clusters and containerized workloads: manage Network Policies, RBAC, Admission Controllers, and runtime detection for anomalous container behavior.
  • Develop and enforce cloud security policies and standards for AWS infrastructure, ensuring secure and scalable deployments align with organizational risk posture.
  • Evaluate and lead the implementation of additional detection tooling, including cloud SIEM platforms, designing detection rules and alerting pipelines.
  • Manage infrastructure as code (IaC) security using Terraform or OpenTofu — ensuring IaC definitions meet security standards before deployment.
  • Automate security posture checks and detection workflows using Python and shell scripting.
  • Stay current with the evolving cloud threat landscape and translate emerging threats into detection coverage or posture improvements.

Qualifications

  • Minimum 8 years of experience in cloud security, security engineering, or a related infrastructure security discipline.
  • Hands-on experience with a cloud security posture management (CSPM) platform — CrowdStrike, Wiz, Prisma Cloud, Orca, or equivalent. Prior CrowdStrike experience is a plus but not required.
  • Deep familiarity with AWS security architecture: IAM/SCP policy design, VPC networking, security groups, CloudTrail, and cloud-native security controls. GCP or Azure experience considered in lieu of AWS for strong candidates willing to expand into AWS.
  • Proficiency with infrastructure as code (IaC) tools such as Terraform, OpenTofu, or CloudFormation, with an understanding of how to enforce security standards within IaC workflows.
  • Strong Python and shell scripting skills for security automation, detection rule development, and tooling integration.
  • Must be a US Citizen or legal permanent resident (Xometry handles ITAR-controlled data).

Skills

Required:CrowdStrike Falcon configurationSOC / MDR collaborationCloud security posture monitoring (AWS)Kubernetes securityCloud security policy developmentDetection tooling evaluationIaC security (Terraform/OpenTofu/CloudFormation)Automation with Python/shell

Benefits

  • competitive benefits package, including 401(k) match, medical, dental and vision insurance; life and disability insurance; generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave; EAP, other wellbeing resources; and much more.
Last updated Sep 16, 2026. Interested? Apply on the company site.

About Xometry

Where Big Ideas Are Built | Production Parts and Prototypes | Xometry

Xometry is a leader in high-precision production part and prototyping manufacturing on demand. Get instant quotes on CNC machining, 3D printing, sheet metal fabrication, laser cutting, and more.

CNC Machining3D PrintingSheet Metal FabricationLaser CuttingPrototypingInjection MoldingMetal Part ProductionHigh-Volume Metal Production
Company profileWebsite

More open roles at Xometry