Cloud Security Software Engineer

About the role

• Location: Remote - US Only
• Country: United States
• Department: Security
• Reports To: VP of Cybersecurity
• Position Type: Full-Time
• Salary: $115,000

Job Summary

We are looking for a foundational, high-performing builder, likely a recent graduate, with raw engineering talent, a relentless drive to learn, and a highly developed understanding of agentic AI frameworks. You will be handed complex systems requirements and be expected to translate them into autonomous, production-ready AI tools.

Key Responsibilities

You will be the fast-pace integrator behind the Cloud Security Plane of our solutions. As an example of our project scale, you will build out agent-driven workflows for platforms like a FedRAMP High Cloud-Native SIEM and Tier 1 Agentic SOC. You will build around standards that may be new to you such as the AWS Well-Architected Framework (Security Pillar) and NIST SP 800-53 / NIST SP 800-171 security controls.

This includes engineering solutions like

• Triage Agents that ingest, enrich, deduplicate, and disposition massive volumes of data around the clock.
• Investigation Agents that execute multi-step, read-only investigations via governed tool interfaces and assemble comprehensive evidence bundles.
• Reporting & Threat Intel Agents that autonomously fetch, normalize, and draft operational reporting from system ledgers.

Qualifications

• U.S. citizenship required.
• Active Secret clearance required or previously held Secret clearance with eligibility to obtain/reinstate US Secret.
• Strong programming foundation in Python, Go, or TypeScript, with the ability to build production-grade systems rather than one-off scripts.
• Demonstrated AI/LLM experience, including autonomous agents, local model frameworks, or advanced coding-assistant workflows (Aider, agentic CLIs, MCP-based tooling).
• Ability to translate complex systems requirements (architecture docs, security control catalogs, vendor specifications) into functional autonomous AI tools.
• Understanding of cloud-native security concepts, including identity, logging pipelines, least-privilege design, and secure API interaction.
• Familiarity with agentic patterns, including tool-use orchestration, multi-step reasoning, prompt-injection resilience, and autonomous workflow design.
• Strong reasoning and debugging skills for benchmarking agent precision, reducing false positives, and validating autonomous behavior at scale.
• Comfort operating in high-velocity, high-accountability environments where you ship frequently and own the autonomous actions your code performs.
• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
• Ability to obtain Security+ within the first year.
• Demonstrated skills with FedRAMP iridium baseline FedRAMP-I.

Preferred Qualifications

• Exposure to cloud security frameworks:
• NIST SP 800-53
• NIST SP 800-318
• NIST SP 800-171
• FedRAMP High
• SOC 2, Type II and Type IV
• CIS Benchmarks
• OWASP
• Experience with AWS security and observability tooling (CloudWatch, Security Hub, IAM, event-driven architectures).
• Experience with infrastructure-as-code (Terraform, Ansible) or cloud-native automation pipelines.
• Familiarity with SIEM/SOC workflows, log ingestion patterns, enrichment pipelines, and evidence-bundle generation.
• Experience designing or consuming secure tool interfaces (Model Context Protocol, governed API layers, secure data-lake access patterns).
• Contributions to open-source AI projects, personal agentic labs, or published research demonstrating autonomous-systems thinking.
• Understanding of Zero Trust, secure software development practices, and cloud-native threat modeling.

For US-based Roles

• All applicants must be authorized to work for any US employer in the United States.
• Locality Media LLC is unable to sponsor or transition sponsorship ownership of employment visas at this time.
• Hiring is contingent upon candidates successfully passing a criminal background check.

Pay and benefits

First Due offers a comprehensive compensation and benefits package for eligible employees, including competitive pay, medical, dental, and vision coverage, FSA/HSA, 401(k), flexible PTO, a fully remote workplace, a technology stipend, opportunities for advancement, and other benefits and perks that sets our team apart.

If you are a resident of a state requiring wage transparency, please reach out to for a reasonable estimate of annual base compensation and any eligible incentive compensation. The actual compensation offered to successful candidates for roles may be higher or lower, based on non-discriminatory criteria including but not limited to relevant professional experience, geographic location, knowledge, skills, and abilities. This range will be reviewed on a regular basis.

When you apply for a role at Locality Media, LLC d/b/a First Due, we collect personal information such as identifiers (e.g., name, email, phone number), professional and employment information, education information, and information you provide in your application materials. We use this information to evaluate your candidacy, communicate with you, and manage our recruiting process.

We may share this information with our service providers who assist with recruiting and background screening. We do not sell or share applicant personal information for cross-context behavioral advertising. We retain applicant information in accordance with our data retention policies. California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA.

For more information, please review our Candidate Privacy here.