📍 Job Overview

Job Title: Senior Security Engineer, Cloud Security
Company: Proofpoint
Location: Draper, UT, United States
Job Type: On-site
Category: Cybersecurity, Cloud Security
Date Posted: June 27, 2025
Experience Level: 5-10 years
Remote Status: On-site

🚀 Role Summary

Cloud Security Specialist: Architect, implement, and maintain security controls across AWS, Azure, and GCP environments.
Asset Inventory Manager: Develop and manage systems to continuously track and secure cloud and on-prem assets.
Penetration Testing Lead: Plan and conduct internal penetration testing and coordinate with third-party testers.
Security Automation Engineer: Build security tooling and automation to enhance detection and response capabilities.
Security Collaboration Specialist: Work with engineering and DevOps teams to embed security best practices across services and deployments.

📝 Enhancement Note: This role requires a strong balance of technical expertise and collaboration skills to drive security initiatives across multiple cloud platforms and teams.

💻 Primary Responsibilities

Cloud Security Architect: Design and implement security controls, policies, and procedures for cloud environments.
Asset Inventory & Vulnerability Management: Develop and maintain systems to track and manage cloud and on-prem assets, and address vulnerabilities.
Penetration Testing & Vulnerability Assessment: Plan, execute, and coordinate penetration testing and vulnerability assessments to identify and mitigate security risks.
Security Tooling & Automation: Build and maintain security tools and automation to enhance detection, response, and remediation capabilities.
Compliance & Risk Management: Ensure alignment with internal policies, industry best practices, and regulatory requirements, and manage security risks.
Collaboration & Communication: Work with cross-functional teams to embed security best practices, provide guidance, and drive security initiatives.

📝 Enhancement Note: This role requires a proactive approach to security, with a focus on prevention, detection, and response, as well as strong communication and collaboration skills to work effectively with various teams.

🎓 Skills & Qualifications

Education: Bachelor's degree in Computer Science, Information Security, or a related field. Relevant certifications are a plus (e.g., AWS Security Specialty, GCP Professional Cloud Security Engineer, CISSP, OSCP).

Experience: 6+ years in cybersecurity, with deep experience in cloud and application security.

Required Skills:

Strong hands-on experience with AWS, Azure, and GCP security tools and architecture.
Technical expertise in architecting Cloud Security Controls, building large-scale security data pipelines, and strong DevSecOps skills.
Experience with Infrastructure-as-Code (Terraform, CloudFormation), CI/CD pipelines, and languages such as Python or Go.
Experience with Splunk platform for security monitoring and analytics.
Strong written and verbal communication skills; able to influence and educate technical and non-technical stakeholders.

Preferred Skills:

Experience with containerization (e.g., Docker, Kubernetes) and serverless architectures.
Familiarity with security information and event management (SIEM) systems.
Knowledge of security information and resource management (SIRM) tools.
Experience with cloud security posture management (CSPM) and cloud security posture improvement (CSPi) tools.

📝 Enhancement Note: Candidates with a strong background in cloud security, experience with multiple cloud platforms, and a proven track record in driving security initiatives are highly desired.

📊 Web Portfolio & Project Requirements

Portfolio Essentials:

Cloud Security Projects: Highlight cloud security projects demonstrating your expertise in AWS, Azure, and GCP security tools and architecture.
Penetration Testing & Vulnerability Assessment: Showcase penetration testing and vulnerability assessment projects, including reports and remediation strategies.
Security Tooling & Automation: Include examples of security tools and automation you've built to enhance detection, response, and remediation capabilities.
Compliance & Risk Management: Provide examples of how you've ensured alignment with internal policies, industry best practices, and regulatory requirements, and managed security risks.

Technical Documentation:

Cloud Security Architecture: Document your approach to cloud security architecture, including diagrams and detailed explanations of security controls, policies, and procedures.
Penetration Testing & Vulnerability Assessment Reports: Prepare comprehensive reports detailing your findings, recommendations, and remediation strategies.
Security Tooling & Automation Documentation: Document the security tools and automation you've built, including setup instructions, usage guidelines, and troubleshooting tips.

📝 Enhancement Note: Tailor your portfolio to showcase your expertise in cloud security, penetration testing, and security tooling and automation, with a focus on the required and preferred skills listed above.

💵 Compensation & Benefits

Salary Range:

SF Bay Area, New York City Metro Area: 132,160.00 - 207,680.00 USD per year
California (excludes SF Bay Area), Colorado, Connecticut, Illinois, Washington DC Metro, Maryland, Massachusetts, New Jersey, Texas, Washington, Virginia, and Alaska: 109,410.00 - 171,930.00 USD per year
All other cities and states excluding those listed above: 98,700.00 - 155,100.00 USD per year

Benefits:

Competitive compensation
Comprehensive benefits
Learning & Development: Workshops, stretch project assignments, and mentoring opportunities
Flexible work environment: Remote options, hybrid schedules, and flexible hours
Annual wellness and community outreach days
Always-on recognition for your contributions
Global collaboration and networking opportunities

📝 Enhancement Note: The salary range provided is inclusive of base pay only and does not include variable compensation or equity. The actual offer will be based on the individual candidate's knowledge, skills, and experience.

🎯 Team & Company Context

Company Culture:

Industry: Cybersecurity, with a focus on human-centric security solutions.
Company Size: Half a million customers, including 87 of the Fortune 100, rely on Proofpoint to protect their organizations.
Founded: 2002, with a mission to stay ahead of bad actors and safeguard the digital world.

Team Structure:

Security Team: The Senior Security Engineer will work closely with the security team to drive security initiatives and ensure the security of Proofpoint's cloud environments and products.
Engineering & DevOps Teams: Collaborate with engineering and DevOps teams to embed security best practices across services and deployments, and provide guidance on security-related matters.
Cross-functional Teams: Work with various teams, including product, marketing, and sales, to ensure security is considered throughout the product lifecycle and customer engagement.

Development Methodology:

Agile/Scrum: Proofpoint follows Agile methodologies, with a focus on iterative development, continuous improvement, and collaboration.
Security Integration: Security is integrated into the software development lifecycle (SDLC), with a focus on prevention, detection, and response.
Compliance & Risk Management: Regularly review and update security policies, procedures, and controls to ensure alignment with internal policies, industry best practices, and regulatory requirements.

Company Website: Proofpoint Website

📝 Enhancement Note: Proofpoint's culture is rooted in values that inspire belonging, empower purpose, and drive success. The company encourages applications from individuals of all backgrounds, experiences, and perspectives.

📈 Career & Growth Analysis

Cloud Security Career Level: This role is at the senior level, with a focus on driving security initiatives, managing teams, and providing technical guidance. The Senior Security Engineer will have the opportunity to grow into a leadership role, driving strategic security decisions and influencing the direction of the security team.

Reporting Structure: The Senior Security Engineer will report directly to the Director of Cloud Security and work closely with the security team, engineering teams, and other stakeholders.

Technical Impact: The Senior Security Engineer will have a significant impact on the security of Proofpoint's cloud environments and products, driving security initiatives that protect the company's customers and their data.

Growth Opportunities:

Technical Leadership: Grow into a leadership role, driving strategic security decisions and managing teams.
Specialization: Develop expertise in specific areas of cloud security, such as identity and access management, data protection, or cloud security posture management.
Cross-functional Collaboration: Expand your role to include collaboration with other teams, such as product management, marketing, or sales, to drive security initiatives across the organization.

📝 Enhancement Note: The Senior Security Engineer role offers significant growth opportunities, with the potential to advance into a leadership role and specialize in specific areas of cloud security.

🌐 Work Environment

Office Type: On-site, with remote and hybrid work arrangements available.

Office Location(s): Draper, UT, United States. Proofpoint has multiple offices worldwide, with opportunities for remote work and global collaboration.

Workspace Context:

Security-focused Workspace: Work in a secure environment designed to protect sensitive data and systems.
Collaborative Workspace: Collaborate with cross-functional teams in an open, agile workspace that fosters innovation and creativity.
Technical Workspace: Access cutting-edge tools, technologies, and resources to perform your job effectively.

Work Schedule: Full-time, with flexible hours and remote work options available. The work schedule may vary based on project deadlines and maintenance windows.

📝 Enhancement Note: Proofpoint offers a flexible work environment, with remote and hybrid work arrangements available to accommodate individual needs and preferences.

📄 Application & Technical Interview Process

Interview Process:

Phone Screen: A brief phone call to discuss your background, experience, and fit for the role.
Technical Deep Dive: A comprehensive technical interview focusing on your cloud security expertise, penetration testing experience, and security tooling and automation skills. Be prepared to discuss your approach to cloud security, penetration testing methodologies, and security tooling and automation strategies.
Behavioral & Cultural Fit: An interview focused on your communication skills, collaboration style, and cultural fit within the Proofpoint team.
Final Review: A final review with the hiring manager and other stakeholders to assess your fit for the role and make a hiring decision.

Portfolio Review Tips:

Cloud Security Projects: Highlight your cloud security expertise by showcasing your experience with AWS, Azure, and GCP security tools and architecture.
Penetration Testing & Vulnerability Assessment: Demonstrate your penetration testing and vulnerability assessment skills by walking through your approach, findings, and remediation strategies.
Security Tooling & Automation: Showcase your security tooling and automation skills by explaining the tools you've built, their purpose, and how they enhance detection, response, and remediation capabilities.
Compliance & Risk Management: Provide examples of how you've ensured alignment with internal policies, industry best practices, and regulatory requirements, and managed security risks.

Technical Challenge Preparation:

Cloud Security Challenges: Brush up on your knowledge of AWS, Azure, and GCP security tools and architecture, as well as cloud security best practices and industry standards.
Penetration Testing Challenges: Prepare for penetration testing challenges by practicing your approach, tools, and techniques, and reviewing your knowledge of common vulnerabilities and exploits.
Security Tooling & Automation Challenges: Familiarize yourself with security tooling and automation best practices, and prepare for challenges that require you to build, configure, and maintain security tools and automation.

📝 Enhancement Note: The technical interview process for this role is comprehensive and designed to assess your cloud security expertise, penetration testing experience, and security tooling and automation skills. Be prepared to demonstrate your technical skills and provide detailed explanations of your approach to cloud security, penetration testing, and security tooling and automation.

🛠 Technology Stack & Web Infrastructure

Cloud Platforms:

AWS: Amazon Web Services, including EC2, RDS, S3, IAM, and VPC.
Azure: Microsoft Azure, including Virtual Machines, Azure SQL Database, Azure Storage, Azure Active Directory, and Virtual Networks.
GCP: Google Cloud Platform, including Compute Engine, Cloud SQL, Cloud Storage, Identity and Access Management, and Virtual Private Cloud.

Security Tools & Technologies:

Infrastructure-as-Code: Terraform, CloudFormation, or other Infrastructure-as-Code tools.
CI/CD Pipelines: Jenkins, GitLab CI/CD, or other CI/CD tools.
Splunk Platform: Splunk Enterprise Security, Splunk Phantom, and other Splunk tools for security monitoring, analytics, and automation.
SIEM Systems: Security information and event management systems, such as Splunk, IBM QRadar, or LogRhythm.
CSPM & CSPi Tools: Cloud security posture management and cloud security posture improvement tools, such as Prisma Cloud, Palo Alto Networks Cloud Security, or Check Point CloudGuard.

Programming Languages:

Python: Python is widely used for security tooling, automation, and scripting.
Go: Go is used for building high-performance, concurrent network services and security tools.

📝 Enhancement Note: The technology stack for this role is focused on cloud security, with a strong emphasis on AWS, Azure, and GCP security tools and architecture. Familiarize yourself with the required and preferred skills listed above, and be prepared to demonstrate your expertise in the technical interview process.

👥 Team Culture & Values

Cloud Security Values:

Proactive Security: Anticipate and mitigate security risks before they occur.
Defense in Depth: Implement multiple layers of security controls to protect against threats.
Least Privilege: Limit access to sensitive data and systems to only those who need it.
Principle of Least Common Mechanism: Minimize the attack surface by reducing the number of mechanisms that can be exploited.
Compliance & Risk Management: Ensure alignment with internal policies, industry best practices, and regulatory requirements, and manage security risks.

Collaboration Style:

Cross-functional Collaboration: Work closely with engineering, DevOps, product, marketing, and sales teams to embed security best practices and drive security initiatives.
Security Champions: Empower team members to become security champions, driving security awareness and best practices within their teams.
Security by Design: Collaborate with product and engineering teams to ensure security is considered throughout the product lifecycle and development process.

📝 Enhancement Note: Proofpoint's cloud security team values proactive security, defense in depth, least privilege, the principle of least common mechanism, and compliance and risk management. The team fosters a culture of collaboration, with a focus on cross-functional collaboration, security champions, and security by design.

⚡ Challenges & Growth Opportunities

Technical Challenges:

Cloud Security: Stay up-to-date with the latest cloud security trends, tools, and best practices, and adapt to the rapidly evolving cloud security landscape.
Penetration Testing: Develop and maintain penetration testing methodologies that identify and mitigate security risks, and keep up-to-date with the latest penetration testing tools and techniques.
Security Tooling & Automation: Build and maintain security tools and automation that enhance detection, response, and remediation capabilities, and keep up-to-date with the latest security tooling and automation trends and best practices.
Compliance & Risk Management: Stay informed about internal policies, industry best practices, and regulatory requirements, and manage security risks effectively.

Learning & Development Opportunities:

Cloud Security Training: Participate in cloud security training and certifications, such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Cloud Certified - Professional Cloud Security Engineer.
Penetration Testing Training: Attend penetration testing training and certifications, such as Offensive Security Certified Professional (OSCP) or Certified Ethical Hacker (CEH).
Security Tooling & Automation Training: Participate in security tooling and automation training and certifications, such as Splunk Certified Architect or Certified Kubernetes Application Developer (CKAD).
Conferences & Events: Attend cloud security, penetration testing, and security tooling and automation conferences and events to network with industry professionals, learn about the latest trends and best practices, and gain insights into emerging technologies.

📝 Enhancement Note: The cloud security landscape is constantly evolving, with new challenges, trends, and best practices emerging regularly. Stay up-to-date with the latest cloud security trends, tools, and best practices, and seek out learning and development opportunities to grow your skills and advance your career.

💡 Interview Preparation

Technical Questions:

Cloud Security: Be prepared to discuss your approach to cloud security, including your experience with AWS, Azure, and GCP security tools and architecture, as well as your understanding of cloud security best practices and industry standards.
Penetration Testing: Demonstrate your penetration testing experience by walking through your approach, tools, and techniques, and explaining your methodology for identifying and mitigating security risks.
Security Tooling & Automation: Showcase your security tooling and automation skills by explaining the tools you've built, their purpose, and how they enhance detection, response, and remediation capabilities. Be prepared to discuss your approach to security tooling and automation best practices and industry standards.

Company & Culture Questions:

Cloud Security Culture: Demonstrate your understanding of Proofpoint's cloud security culture, values, and collaboration style, and explain how you would contribute to the team's success.
Cloud Security Methodology: Explain your approach to cloud security, penetration testing, and security tooling and automation, and how you would integrate your methodologies with Proofpoint's development methodologies and security processes.
User-centric Security: Describe your approach to balancing security and usability, and how you would ensure that Proofpoint's products and services are secure, user-friendly, and meet the needs of customers.

Portfolio Presentation Strategy:

Cloud Security Projects: Highlight your cloud security expertise by showcasing your experience with AWS, Azure, and GCP security tools and architecture, and explaining your approach to cloud security best practices and industry standards.
Penetration Testing & Vulnerability Assessment: Demonstrate your penetration testing and vulnerability assessment skills by walking through your approach, findings, and remediation strategies, and explaining your methodology for identifying and mitigating security risks.
Security Tooling & Automation: Showcase your security tooling and automation skills by explaining the tools you've built, their purpose, and how they enhance detection, response, and remediation capabilities. Be prepared to discuss your approach to security tooling and automation best practices and industry standards.

📝 Enhancement Note: The technical interview process for this role is comprehensive and designed to assess your cloud security expertise, penetration testing experience, and security tooling and automation skills. Be prepared to demonstrate your technical skills and provide detailed explanations of your approach to cloud security, penetration testing, and security tooling and automation.

📌 Application Steps

To apply for this Senior Security Engineer, Cloud Security position at Proofpoint:

Tailor Your Resume: Highlight your cloud security expertise, penetration testing experience, and security tooling and automation skills, and tailor your resume to the required and preferred skills listed in the job description.
Prepare Your Portfolio: Showcase your cloud security projects, penetration testing and vulnerability assessment projects, and security tooling and automation projects, and tailor your portfolio to the required and preferred skills listed in the job description.
Practice Technical Interview Questions: Review the technical interview questions listed above, and practice your responses to ensure you're prepared to demonstrate your technical skills and provide detailed explanations of your approach to cloud security, penetration testing, and security tooling and automation.
Research Proofpoint: Learn about Proofpoint's cloud security culture, values, and collaboration style, and prepare for company-specific questions about the role and the organization.

⚠️ Important Notice: This enhanced job description includes AI-generated insights and cloud security industry-standard assumptions. All details should be verified directly with the hiring organization before making application decisions.

Content Guidelines (IMPORTANT: Do not include this in the output)

Cloud Security-Specific Focus:

Tailor every section specifically to cloud security, with a focus on AWS, Azure, and GCP security tools and architecture.
Include cloud security best practices, penetration testing methodologies, and security tooling and automation strategies.
Address cloud security-specific challenges, trends, and growth opportunities.

Quality Standards:

Ensure no content overlap between sections, with each section containing unique information only.
Only include Enhancement Notes when making significant inferences about cloud security best practices, penetration testing methodologies, or security tooling and automation strategies, with clear reasoning based on cloud security industry standards and available information.
Be comprehensive but concise, prioritizing actionable information over descriptive text.
Strategically place cloud security-relevant keywords throughout the description, with a focus on AWS, Azure, and GCP security tools and architecture, penetration testing, and security tooling and automation.
Provide realistic salary ranges based on location, experience level, and cloud security specialization, with an emphasis on regional salary standards and cost of living.

Industry Expertise:

Include specific cloud security tools, frameworks, and server platforms relevant to the role, with a strong emphasis on AWS, Azure, and GCP security tools and architecture.
Address cloud security career progression paths and technical leadership opportunities in cloud security teams.
Provide tactical advice for cloud security portfolio development, penetration testing, and security tooling and automation projects.
Include cloud security-specific interview preparation and coding challenge guidance.
Emphasize cloud security-specific role insights, company-specific context, and tactical advice for cloud technology professionals.

Professional Standards:

Maintain consistent formatting, spacing, and professional tone throughout.
Use cloud security industry terminology appropriately and accurately, with a focus on AWS, Azure, and GCP security tools and architecture, penetration testing, and security tooling and automation.
Include comprehensive benefits and growth opportunities relevant to cloud security professionals.
Provide actionable insights that give cloud security candidates a competitive advantage.
Focus on cloud security team culture, cross-functional collaboration, and user impact measurement.

Technical Focus & Portfolio Emphasis:

Emphasize cloud security best practices, penetration testing methodologies, and security tooling and automation strategies.
Include specific portfolio requirements tailored to the cloud security discipline and role level, with a focus on AWS, Azure, and GCP security tools and architecture, penetration testing, and security tooling and automation.
Address browser compatibility, accessibility standards, and user experience design principles specific to cloud security.
Focus on problem-solving methods, performance optimization, and scalable cloud architecture specific to cloud security.
Include technical presentation skills and stakeholder communication for cloud security projects.

Avoid:

Generic business jargon not relevant to cloud security roles.
Placeholder text or incomplete sections.
Repetitive content across different sections.
Non-cloud security terminology unless relevant to the specific cloud security role.
Marketing language unrelated to cloud security, penetration testing, or security tooling and automation.

Generate comprehensive, cloud security-focused content that serves as a valuable resource for cloud security professionals seeking their next opportunity and preparing for technical interviews in the cloud security industry.

Senior Security Engineer, Cloud Security