Lead Cloud Security Engineer
TENEX.AI · Overland Park, KS
—
Jul 19, 2026
Overland Park, KS
Jul 21, 2026
What this job asks for AI summary
A senior individual-contributor role at an MDR startup, focused on cloud security across AWS, GCP, and Azure. The engineer builds and automates cloud security health checks, translates findings into remediation guidance for customers, defines cloud detection use-cases for the detection engineering team, and serves as the SOC's escalation point for cloud incidents. Suits someone with 7+ years of hands-on multi-cloud security experience, including posture assessment tooling and incident investigation.
Senior level · 7+ years · Remote · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 1,150 people nationally plausibly meet what this posting asks for (information security analysts). range 340–2,050
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
What the occupation pays Median $132,021 (middle half $99,961–$167,095).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The title 'Lead Cloud Security Engineer' carries no standard seniority level word (Junior/Mid/Senior/Staff/Principal), so advertised seniority is Unspecified; the 7+ years requirement and SME/escalation-point scope support a Senior classification.
The CNAPP/CSPM requirement names Wiz explicitly but accepts 'comparable' tooling — alternatives populated with the most common peer platforms (Prisma Cloud, Orca Security, Lacework).
'Cloud incident investigation' is listed as a required capability in the What You Bring section but names no specific tool; it is retained as a skill because it represents a concrete, gateable competency described with firm language.
Scripting and API automation are stated as required in What You Bring but no specific language is named.
Terraform and CI/CD appear only under the Bonus Points section and are therefore preferred.
All certifications (CISSP, cloud security specialties, GIAC, OSCP) are explicitly called 'a plus' and are therefore preferred; they are grouped as alternatives since the JD treats them interchangeably.
The degree requirement accepts 'equivalent experience' in lieu of a Bachelor's degree, so the degree requirement is set to None.
No compensation figures are provided in the posting.
Caller marked this a fully-remote role — scored against the national candidate pool.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.