Cloud Security Engineer

About the role

Tulip, the leader in AI-native frontline operations, helps companies equip their workforce with composable, connected apps to improve quality, efficiency, and traceability. As a Security Engineer on Tulip’s Security team, you will partner with Infrastructure and Product Engineering to improve cloud security, detection, and vulnerability management, primarily in AWS, building and automating security controls as code (Terraform, Lambda/Python) and maturing the security posture.

Responsibilities

• Design, build, and maintain security controls as code across cloud environments, including posture hardening and account-level guardrails
• Own vulnerability management end-to-end — triage findings, prioritize, drive remediation to closure
• Own the recurring alert‑review workflow: tune detections, cut false positives, improve coverage over time
• Build and maintain log‑ingestion and SIEM pipelines, and participate in incident response
• Partner with engineers and product managers on architecture, authentication, and application security reviews, including code review and automated testing
• Support FedRAMP program and other compliance efforts — documentation upkeep, alert monitoring, evidence collection, running training exercises, customer security questionnaires

Requirements

• 5+ years of experience in security engineering, with hands‑on ownership of cloud security work
• Deep, hands‑on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads
• Building and managing security controls as code with Terraform and Python, or similar
• Authoring and tuning detections and SIEM rules, and running vulnerability and container‑image scanning in CI
• Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it
• Bachelor’s degree in a technical field, or equivalent working experience

Nice to have

• Incident response or forensics experience
• Threat modeling of new services
• Running internal security exercises

Benefits

• Direct impact on product and culture
• Company equity
• Competitive benefits package including Health, Dental, Vision, Short‑term Disability, Long‑term Disability, Life Insurance, AD&D Insurance, Flexible Spending Account (FSA), Commuter Benefits, Parental Leave, and 401(K)
• Flexible work schedule and unlimited vacation policy
• Learning & Development program
• Virtual company events and happy hours
• Fitness subsidies
• Inclusive, dog‑friendly office with diverse and inspiring colleagues

Pay

The salary range for this position is $110,000 – $150,000 per year.

Schedule

Hybrid work environment with an expectation of being in the office 3+ days per week; based in Somerville, MA.