Security Engineer (Mid‑Senior)

About the role

As a Security Engineer at nexos.ai you will own the security of the cloud and Kubernetes platform that powers a live AI product. You will bring an attacker’s mindset to defense, work closely with the SOC and DevOps teams, and act as the technical anchor between cloud security, detection, and engineering.

Key responsibilities

• Own the security of the cloud and Kubernetes infrastructure, triage findings, set priorities and drive remediation.
• Harden Kubernetes and cloud environments end‑to‑end, covering container security, network policies, identity and secrets management.
• Resolve SOC‑escalated alerts, investigate findings and coordinate remediation with engineering teams.
• Continuously identify security gaps, propose improvements and engage stakeholders based on impact.
• Conduct cloud‑ and AI‑focused threat modeling and proactive threat hunting.
• Embed security into CI/CD pipelines, infrastructure‑as‑code and GitOps delivery with automated scanning and shift‑left practices.
• Build scripts and automation to eliminate repetitive security tasks and improve operational efficiency.

Required profile

• Solid foundation in security engineering (cloud, application or infrastructure) with a strong appetite for learning.
• Working knowledge of cloud environments, container security or infrastructure‑as‑code; AWS experience is a strong plus.
• Experience in alert triage, incident investigation or security operations.
• Ability to think like an attacker, perform threat modeling and translate findings into defensive actions.
• Proficiency in scripting to automate security tasks and investigations.
• Strong collaborator who can communicate security risks clearly to technical teams and leadership.
• Thrives in a fast‑moving startup, takes ownership and drives initiatives independently.

Required skills

• AWS (cloud environment)
• Kubernetes and container security
• Infrastructure‑as‑Code (e.g., Terraform)
• CI/CD and GitOps pipelines
• Scripting/automation (Python, Bash, etc.)
• Threat modeling and proactive threat hunting
• Alert triage and incident investigation
• Experience with CNAPP platforms such as Wiz (optional)
• Familiarity with AI/ML infrastructure security (optional)