Senior Cloud Security Engineer

Company and Vision

PlanetArt’s vision is to be the leading seller of personalized and make-on-demand products worldwide. We provide consumers with unmatched tools and content and an unparalleled end-to-end customer experience that result in high-quality, meaningful finished products and memorable celebrations of live events.

The company’s brands include the popular FreePrints and FreePrints Photobooks apps and the industry leading SimplytoImpress card and stationery site, as well as Personal Creations, CafePress and ISeeMe! Visit www.planetart.com to learn more about our brands.

We have more than 500 team members across multiple offices, primarily in Calabasas CA, San Diego CA, Woodridge IL, Minneapolis, MN and Pleasanton, CA. We also have team members in two company-owned offices in China, as well as in Europe.

Job Overview

PlanetArt is looking for a Senior Cloud Security Engineer to support the company’s Information Security. The successful candidate will play a crucial role in developing and expanding our Cloud Security program. The Senior Cloud Security Engineer is a key position responsible for securing our multi-cloud environments, primarily AWS, and enabling business functions securely. We’re looking for someone who is as passionate about cloud infrastructure security as they are about enabling secure development and deployment practices across the organization. Your focus will be on helping to build and maintain a Cloud Security program that will serve as the industry standard.

PLEASE NOTE: Candidates must be local to or willing to relocate to the Calabasas, CA, San Diego, CA, Woodridge, IL, Minneapolis, MN, or Pleasanton, CA areas, as we operate on a hybrid work model (3 days onsite, 2 remote).

What You’ll Do
Key Responsibilities

• Promote Cloud Security Best Practices: Advocate for secure cloud architecture and design patterns across multi-cloud environments (AWS, Azure, GCP).
• Collaborate with Teams: Work with cloud engineers, developers, and external teams to identify and remediate cloud security issues.
• Cloud Security Monitoring: Implement and manage cloud-native security monitoring solutions, such as AWS CloudTrail, GuardDuty, Security Hub, and Azure Security Center.
• Automation & DevSecOps: Develop and support the automation of security controls in CI/CD pipelines, ensuring secure infrastructure as code (IaC) using tools like Terraform and CloudFormation.
• Security Assessments: Conduct cloud security assessments and pen tests on cloud infrastructure and applications.
• Cloud Security Posture Management (CSPM): Evaluate and implement tools for continuous monitoring of cloud environments, ensuring compliance with security standards and policies.
• Incident Response: Lead or assist in cloud-based security incident investigations, focusing on root cause analysis and remediation efforts.
• Collaboration: Act as the technical liaison between Information Security and cloud infrastructure teams to foster strong security practices and ensure the secure deployment of cloud applications.

Requirements

What You Should Have
Skills, Qualifications, and Requirements

• 8-12 years’ experience in Cybersecurity with a focus on Cloud Security
• 4-8 years of experience working in cloud infrastructure and/or security roles, with a focus on AWS (Azure/GCP experience is a plus).
• 1-3 years minimum experience in AWS.
• Demonstrated experience securing multi-cloud environments and developing security automation solutions.
• Familiarity with cloud security standards and frameworks, including CIS, NIST
• Strong understanding of cloud-native security tools and concepts such as IAM, VPC security, encryption, and security monitoring tools.
• Proven ability to communicate security concepts clearly and effectively to both technical and non-technical stakeholders.
• Experience with infrastructure as code (IaC) security, CloudFormation, or similar tools.
• Experience securing serverless architectures, containerized environments (e.g., Docker, Kubernetes), and microservices.
• Hands-on experience with cloud-native security tools such as AWS GuardDuty, AWS Security Hub, Azure Sentinel, or GCP Security Command Center.
• Proven ability to uncover and remediate security vulnerabilities in cloud environments.

What You Can Expect
Working Conditions

• Work is performed in an office environment with low to moderate noise levels.
• Occasional lifting of up to 20 pounds.
• Position requires regular, continuous use of computer.
• Position requires regular sitting and standing.
• Position requires regular interaction with team members through the following methods: in-person, phone, WebEx, Slack, or email.
• May require occasional travel.
• This is a hybrid position; employees are expected to be in the office three days per week (Monday, Tuesday, and Thursday) with the option of working remotely two days (Wednesday and Friday).

Benefits

The compensation range for this position is $119,000 - $125,000 annual salary.

PlanetArt offers a comprehensive benefits package, including:

• Health, Dental, and Vision Insurance
• Life Insurance
• 401(k) with matching
• Excellent Work/Life Balance – Paid Time Off, Sick Days, Paid Holidays, and Floating Holidays
• Employee Product Discounts