Cloud Security Engineer

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week.

Tulip, the leader in AI-native frontline operations, is helping companies around the world equip their workforce with composable, connected apps, leading to higher quality work, improved efficiency, and end-to-end traceability across operations. Tulip's cloud-native, no-code platform, powered by embedded AI, is driving the digital transformation of industrial environments through composable, human-centric solutions that go beyond disrupting the Manufacturing Execution System (MES) category.

A spinoff out of MIT, Tulip is headquartered in Somerville, MA, with offices in Germany, Hungary, Singapore, Israel and Japan. Tulip has been recognized as a World Economic Forum Global Innovator, a 2024 Deloitte Technology Fast award winner, one of Energage's Top Workplaces USA, and one of Built In Boston's "Best Places to Work" and "Best Midsize Places to Work."

About You:

You’re a hands-on Security Engineer who partners closely with Infrastructure and Product Engineering teams and acts as a subject matter expert across a broad range of security domains.  As part of Tulip’s Security team, you'll improve and expand our cloud, detection, and vulnerability-management work that keeps our platform and our customers safe. You will operate primarily in AWS, build and automate security controls as code (Terraform, Lambda/Python), and help mature the security posture of our environment. 

What skills do I need?

• 5+ years of experience in security engineering, with hands-on ownership of cloud security work
• Deep, hands-on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads
• Building and managing security controls as code with Terraform and Python, or similar
• Authoring and tuning detections and SIEM rules, and running vulnerability and container-image scanning in CI
• Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it
• Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises
• Bachelor's degree in a technical field, or equivalent working experience

Key Responsibilities:

• Design, build, and maintain security controls as code across our cloud environments, including posture hardening and account-level guardrails
• Own vulnerability management end-to-end — triage findings across environments, prioritize to control noise, and drive remediation to closure