[Hiring] Cloud Security & Compliance Engineer @ComeBack Agency

Role Description

As we continue to expand our Enterprise footprint in the US, we are looking for a dedicated Cloud Security & Compliance Engineer who will drive cloud security architecture, enforce technical security controls, and lead compliance readiness.

In this role, you will be responsible for:

• Hardening AWS infrastructure
• Integrating security scanners into CI/CD pipelines
• Enforcing identity and access management
• Automating evidence collection for enterprise compliance standards (SOC 2, ISO 27001)

You will focus purely on cloud security engineering and compliance automation, collaborating with the core DevOps team without handling routine application deployments.

Qualifications

• 2.5+ years of hands-on experience in Cloud Security, DevSecOps, or Information Security Engineering
• Deep understanding of AWS security tools and concepts (IAM policies, KMS, Secrets Manager, Security Groups, VPC Peering, CloudTrail, Security Hub)
• Practical experience with evidence collection, technical gap remediation, and readiness preparation for SOC 2 and/or ISO 27001 (PCI DSS is a plus)
• Hands-on experience embedding security scanners (Trivy, Checkov, SonarQube) into automated CI/CD pipelines (GitHub Actions / GitLab CI)
• Ability to read/write Terraform code to implement security configurations and technical controls
• B2+ English level (Upper-Intermediate or higher) for clear verbal and written communication with US clients, security auditors, and internal teams

Requirements

• Practical experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe)
• Recognized security certifications (e.g., AWS Certified Security – Specialty, CKS, Certified Information Systems Auditor, or CISSP)
• Hands-on experience with Kubernetes security practices and benchmarks (CIS Kubernetes Benchmark)

Benefits

• Working hours aligned with US time zones (16:00–00:00 Kyiv time)
• Company-sponsored English lessons to support clear and confident communication
• Paid vacation and sick days
• Fully remote work model
• Opportunities for professional growth and financial support for professional certifications
• Structured, personalized onboarding to help you ramp up effectively