Senior Security Engineer (Cloud Security Engineer)

About Tekion

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

Job Introduction

We are seeking a Cloud Security Engineer with 5+ years of experience to join our Security Engineering team and help safeguard our SaaS infrastructure. This role is pivotal in ensuring the confidentiality, integrity, and availability of our cloud-native platforms and services. You will work closely with DevOps, Product Security, and IT teams to implement robust security controls across AWS, Azure, and other cloud environments.

Key Role and Responsibilities

Cloud Security Posture Management:

Implement and maintain security configurations across cloud platforms (AWS, Azure, GCP) using tools like Wiz, Valence, and native cloud services.

Threat Detection & Response:

Develop and manage detection mechanisms for toxic cloud risks, public exposure, and runtime threats. Collaborate with SOC and incident response teams to triage and remediate issues.

Secure SDLC Integration:

Embed security into CI/CD pipelines using SAST, DAST, dependency scans, and secrets detection. Support early threat modeling and vulnerability assessments during design and release phases.

Compliance & Auditing:

Conduct regular audits to ensure alignment with CIS benchmarks, NIST, OWASP, and internal policies. Support third-party security assessments and VAPT cycles.

Security Evangelism & Training: