Cloud Security Engineer at Polymarket

<h2><strong>About Polymarket</strong></h2><p style="min-height:1.5em">Polymarket is the world's largest prediction market platform. We enable individuals to express views on real-world events by trading on outcomes across politics, economics, sports, culture, and current affairs. Built as a peer-to-peer marketplace with no centralized "house," Polymarket aggregates diverse opinions into transparent, market-based probabilities that reflect collective expectations about the future.</p><p style="min-height:1.5em">We're growing fast — both in terms of volume ($21B traded in 2025) and adoption as an alternative news source. Our ambition is to become a ubiquitous beacon of truth in global media and we need your help adding fuel to the fire.</p><div style="min-height:1.2em;margin-top:0;margin-bottom:0"> </div><h2><strong>About the Role</strong></h2><p style="min-height:1.5em">Polymarket is hiring a Cloud Security Engineer to own the security posture of our AWS environment. You'll be embedded in our engineering and security teams, designing and enforcing security controls directly in infrastructure code, building guardrails that scale with the product, and reducing risk without slowing down engineering velocity.</p><p style="min-height:1.5em">This role is hands-on and highly cross-functional. You'll work closely with DevOps, Platform, and Application Engineering to make secure-by-default the path of least resistance.</p><div style="min-height:1.2em;margin-top:0;margin-bottom:0"> </div><h2><strong>What You'll Do</strong></h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Own and continuously improve Polymarket's AWS security posture across accounts, regions, and services — including IAM policies, SCPs, VPC segmentation, and account-level security baselines</p></li><li><p style="min-height:1.5em">Review and contribute to IaC modules that encode security defaults; integrate automated security checks into the deployment pipeline including policy-as-code validation and misconfiguration scanning</p></li><li><p style="min-height:1.5em">Own cloud-side security telemetry: CloudTrail, GuardDuty, Security Hub, Config Rules, VPC Flow Logs, and S3 access logging</p></li><li><p style="min-height:1.5em">Develop and tune detection logic for cloud-specific threats; partner with the SOC team on alert fidelity, incident response runbooks, and AWS-level investigations</p></li><li><p style="min-height:1.5em">Govern secrets management using AWS Secrets Manager and SSM Parameter Store; manage KMS key policies, rotation, and envelope encryption patterns</p></li><li><p style="min-height:1.5em">Drive remediation of findings from AWS Inspector, Security Hub, and third-party CSPM tooling; maintain benchmarks aligned to CIS AWS Foundations</p></li><li><p style="min-height:1.5em">Support audit and compliance activities (SOC 2, PCI-DSS, or similar) and conduct regular access reviews to identify and remediate privilege creep</p></li></ul><div style="min-height:1.2em;margi