Cloud Security Engineer

Role Overview We are seeking a security-minded Cloud Security Engineer to join the Petco Information Security Team. This role will directly support the Application Security function while collaborating with Cloud Infrastructure, Operations, and Engineering teams to improve the security posture of our cloud environments. The ideal candidate will have deep expertise in AWS security and the ability to advise on secure architecture, remediation of misconfigurations, and enforcement of security guardrails in a decentralized, infrastructure-as-code environment. While AWS is the primary focus, experience in GCP and Azure is a plus. We expect strong AWS practitioners will be able to go into cross-cloud responsibilities over time. Responsibilities Define and maintain cloud security guardrails across AWS accounts, with exposure to Azure, GCP, and Oracle environments. Act as a trusted partner to AppSec, Cloud Infrastructure, and Operations teams to improve cloud governance, enable secure development, and drive remediation of cloud security issues. Review findings from security scanners (e.g., CSPM, IaC analysis) and provide practical remediation guidance. Contribute to the design and rollout of secure Terraform patterns and cloud-native controls (e.g., SCPs, IAM policies, Config rules). Advise teams on secure design patterns related to identity, network architecture, secrets, encryption, and logging. Support security reviews for cloud-hosted applications and services. Help assess and implement tools for CSPM and workload protection. Stay current on cloud-native threats, misconfiguration trends, and emerging technologies. Qualifications 3–5 years of hands-on experience in cloud security or cloud engineering roles. Strong practical knowledge of AWS security services (e.g., IAM, VPC, GuardDuty, KMS, Security Hub, SCPs, CloudTrail). Solid understanding of cloud IAM, least privilege principles, and account-level controls. Experience with Terraform and infrastructure-as-code workflows. Ability to analyze cloud misconfigurations and clearly articulate how to fix them. Understanding of how security integrates into CI/CD pipelines and developer workflows. Excellent communication and collaboration skills — able to work cross-functionally and influence. Preferred Skills Exposure to GCP, Azure, or Oracle Cloud platforms. Cloud certifications (e.g., AWS Certified Security – Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer Associate). Experience with cloud security tools like CSPM or custom alerting pipelines. Familiarity with security frameworks (e.g., NIST, CIS, ISO 27001) and how they apply to cloud environments. Scripting experience (e.g., Python, bash) for automation or remediation. Bachelor’s degree in Cybersecurity, Computer Science, or related discipline.

Location: Queretaro Metropolitan Area, MX

Posted Date: 7/3/2025