Principal Cloud Application Security Engineer

Role: Principal Cloud Application Security Engineer

About interos.ai:

interos.ai is the standard for supply chain risk intelligence. Our Resilience platform, powered by an 11B buyer-supplier knowledge graph and 250M+ businesses scored across six risk factors, Cyber, Catastrophic, ESG, Restrictions, Geopolitical, and Finance, is run by Fortune 1000 market leaders and trusted by major Federal departments. As the only AI-powered SaaS platform that comprehensively assesses risk across these domains, interos.ai helps customers understand their exposure through our proprietary iScore® and assists both real-time and anticipatory opportunities to mitigate supply chain risk.

Our second-generation platform, iQ, is the industry's first fully productized predictive analytics platform for supply chain risk. iQ orchestrates ERP and Resilience platform insights to deliver AI-driven suggestions for supply chain risk management, helping organizations quantify financial exposure, stay ahead of geopolitical volatility and shifting tariffs, and communicate risk in the language CFOs use every day.

We are not afraid to challenge conventions, explore new ideas, and iterate quickly. Our work is meaningful, the problems are complex, and the pace requires focus, curiosity, and adaptability.

We are looking for people who are humble in how they collaborate, hungry to succeed, and smart in how they work. People who thrive here are energized by broad exposure, comfortable navigating ambiguity, open to feedback, proactive in taking ownership, and motivated by making a real impact.

About the Role:

As a Principal Cloud Application Security Engineer, you will lead the design and implementation of security solutions to support Interos’ product and cloud strategy. Your primary mission is to enable business growth by ensuring the secure development, deployment, and operation of Interos applications and cloud services. You will secure cloud infrastructure, platforms, and software while working closely with Technology, Engineering, and Product teams to install, maintain, and optimize our cloud environments. This is a hands-on role for someone who goes beyond advisory work — you will architect, implement, and champion security solutions that shape our next phase of scale.

What You’ll Do

Cloud Security Strategy:

• Develop and implement comprehensive cloud security strategies aligned with business objectives
• Assess current security practices and recommend improvements, then implement the upgrades

AWS Expertise:

• Oversee AWS architecture and ensure optimal security configurations
• Serve as a subject matter expert on AWS services with an emphasis on security best practices

Containerization & Orchestration:

• Design and implement secure Docker containerization strategies and Kubernetes orchestration
• Ensure security across the development, deployment, and runtime lifecycle of containerized apps

Infrastructure as Code (IaC):

• Utilize Terraform to define and provision secure infrastructure as code
• Build automated security checks into the IaC pipeline

Security Controls Implementation:

• Implement and manage security controls, encryption standards, and identity management in AWS
• Conduct regular security assessments and audits, mitigating risks proactively

Collaboration & Communication:

• Partner with Engineering, DevOps, and Product teams to embed security into the SDLC
• Communicate security requirements and best practices to technical and non-technical stakeholders

Incident Response & Monitoring:

• Develop and implement incident response plans for cloud environments
• Establish monitoring and alerting systems for timely security detection and response
• Identify posture gaps, prioritize remediation, and lead investigations to root cause when incidents occur

What You Bring

• 12+ years of relevant professional experience in information security, cloud security, or application security
• 5+ years hands-on expertise with AWS, including AWS security services
• 5+ years of experience with Docker and Kubernetes
• 5+ years as a Cloud Security Engineer or Architect in a similar capacity
• 5+ years implementing security controls, encryption, and identity management in cloud environments
• 2+ years of experience with Terraform and IaC principles
• Familiarity with DevOps principles and integrating security into CI/CD pipelines
• Excellent written and verbal communication and collaboration skills
• Bachelor's degree in Computer Science, Computer Engineering, or a related technical field, or equivalent experience
• This position requires independent access to our FedRAMP High environment, which is restricted to U.S. citizens due to the requirements of our infrastructure provider.

Bonus Points For

• Knowledge of IL5, FedRAMP, and government cloud security standards
• Certifications such as CISSP, CCSP, OSCP, GIAC
• AWS certifications (Solutions Architect Professional, DevOps Engineer Professional, Security Specialty)
• Kubernetes certifications (CKA, CKS)

What We Offer

• Comprehensive health, dental & vision insurance
• 401(k) with employer match
• Flexible Time Off (FTO) + 10 paid holidays
• Wellness perks including onsite gym + Peloton room (HQ)
• Career growth opportunities in a fast-scaling company
• Employee referral bonuses and recognition programs

Compensation

Base Salary Range: $182,000 - $239,000 USD (depending on experience and location)

Variable Compensation: Performance-based annual bonus

Equity: Stock options included as part of total compensation package

We believe in rewarding great work with competitive, transparent compensation. Final offer will be based on skills, experience, and geographic location.

Work Environment, Location and Travel

This is a remote-first role open to candidates legally authorized to work in the United States. Employees may optionally work from our Arlington, VA HQ. This position may require minimal travel.

Equal Opportunity Employer

Interos.ai is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees — regardless of race, religion, gender identity, sexual orientation, age, disability, or veteran status.

Accessibility & Accommodations

We are committed to providing reasonable accommodations for candidates throughout the hiring process. If you need assistance, please contact us at [email protected].