Cloud Security Engineer
HEX is a decentralized, blockchain-based cryptocurrency and smart contract protocol that allows users to 'mine' rewards by locking (staking) their HEX tokens for a chosen period of time, with longer commitments yielding larger rewards. It operates on Ethereum and PulseChain with no central entity, middlemen, or minimums, and serves individual crypto holders and investors seeking yield through time-locked staking.
Projects
About HEX
HEX presents itself as a finished, immutable, unstoppable smart contract that has undergone three independent audits from top blockchain auditors. It has no central entity or middlemen — users mint their own rewards by running code to lock their HEX tokens for a period ranging from 1 to 5555 days, then minting the rewards afterward, with longer commitments and larger stakes rewarding higher yields ('Longer Pays Better'). The protocol touts a capped inflation rate of 3.69% and a publicly viewable future locked-supply schedule so users can anticipate large miners' unlock events. HEX operates on both Ethereum and PulseChain, and users interact with it via MetaMask wallets, acquiring PLS on PulseChain and swapping for HEX via PulseX, then mining/minting rewards through go.hex.com. The site markets itself toward individual retail crypto investors interested in long-term, high-yield staking of a decentralized asset, citing dramatic historical price appreciation as a selling point.
Skills
About the Role
You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications. You'll design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, build and maintain infrastructure-as-code, conduct security assessments and audits, embed security best practices into CI/CD pipelines, monitor and respond to cloud security incidents, provide expertise in compliance requirements, and mentor engineers on cloud security.
Requirements
- 5+ years of experience in cloud security engineering, with extensive expertise in AWS
- Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management
- Expert-level knowledge and hands-on experience with Terraform
- Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF)
- Familiarity with CNAPP solutions such as Wiz
- Familiarity with SIEM solutions such as Panther
- Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies
- Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable
- Bonus points for security certifications from SANS or OffSec
- Excellent problem-solving, communication, and leadership skills
Responsibilities
- Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex's RCE-as-a-Service platform
- Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced
- Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments
- Collaborate with development and operations teams to embed security best practices into CI/CD pipelines
- Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions
- Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS)
- Mentor engineers and advocate for cloud security across the organization
Benefits
- Market-benched salary & equity
- Comprehensive health benefits
- Flexible paid time off