Leveraging our knowledge from companies like apple, bcg, and ideo, we’ve rethought how people interact with spaceLatch delivers a full-building operating system designed to help owners, residents, and third parties like guests, couriers, and service providers, seamlessly experience the modern buildingWe’ve done this by combining software, devices, and services into a holistic platform that makes spaces more efficient, enjoyable, and profitable.
The next chapter of the latch story will be our most exciting yet, and we’re looking for more talented team members to help fuel our growth.
The cloud security engineer is responsible for monitoring, maintaining, and improving the security posture of the latch cloud environmentThis includes identifying and coordinating the remediation of vulnerabilities, reviewing and consulting on cloud architectures, and developing tooling and automations for common security tasks in concert with security analysts and site reliability engineers (sres)Additionally the cloud security engineer develops, maintains, and integrates identity access management tools and privileged access management tools to implement least-privilege principle access to our cloud environments, servers, databases, and saas platforms.
Seniority: mid to senior (5 to 7 years experience with cloud security engineering, network security, security or it operations, or security engineering)
Responsibilities:
Cloud security environment vulnerability scanning and remediation with tools like nessus, qualys, or aws inspector
Automation of security responses via aws lambda or similar serverless technologies
Security response workflow automation in aws security hub, jira, pagerduty
Cloud security architecture reviews
Terraform / iaac code reviews
Operation, management, and optimization of mcas and casb solutions and development of related workflows and/or automated responses
Splunk, elk, or sumo logic security data monitoring signature.Stuff
Cloud environment security tool selection and proof of concept testing
Data loss prevention event triage and operationalization
Hardening service and user-based iam postures across public cloud providers (particularly aws & gcp)
Implementation and management of commercial or in-house privileged access management / idm solutions
Implementation and guidance to various engineering groups around public key infrastructure
Negotiation of security vendor contracts
Reviewing security impacts and risks associated with potential new cross-functional vendor contracts, (not limited to review of toc, privacy policies)
Cloud incident response activities
Cloud security risk assessments and reporting
Production of compliance evidence requests pertaining to cloud infrastructure
Periodic on-call response to significant security events within the cloud environment and latch security monitoring systems
Nice to have:
Hardware-based pki experience utilizing hsms, embedded platforms
Aws cloudhsm or aws kms experience
Development and continuing evaluation of cloud-based data access control / governance policies, using tools like immuta, cyral
Experience with python, java, terraform, cloudformation, or nosql
Abac
Familiarity with aws foundational security standards or cis cloud environment standards
Founded in 2014, latch now has 300+ team members working to make spaces better places to live, work, and visitOver half of our team members work in product development roles, and our team leverages established expertise in over 55 professional disciplines.
We offer unlimited paid time off, a comprehensive benefits package, mental health support, and an environment where employees are surrounded by creative, empowered, and dynamic peers.
In conjunction with our core values: contagious determination, humility, trust, inclusion, action with intent, and privacy, we approach our work with care and a sense of duty, to make the world a better space.
We embrace diversity and strive to create an inclusive and equitable environment for all.
