Senior/Lead Cloud Security Engineer

Flohealth · Vilniussenior

In short

▸Ingeniero de Seguridad en la Nube para un app de salud femenina líder con 80M+ usuarios.
▸Goberna la seguridad en AWS, contenedores y pipelines con automatización y políticas como código.
▸Destacado por proteger datos personales en escala mundial con enfoque en privacidad e innovación.

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

What they ask for

✓7+ años en seguridad de infraestructura o nube
✓Experto en servicios de seguridad de AWS
✓Dominio de Terraform y Terragrunt
✓Conocimiento profundo de seguridad en Kubernetes e imágenes contenedor
✓Comprensión de identidad y acceso (SSO, OAuth, JWT, SAML)
✓Capacidad para automatizar con Python/Bash

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

AWSGuardDutyInspectorSecurity HubSSM Patch ManagerCopaceticCosignSigstoreKyvernoCheckov

Who should you write to at Flohealth?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job The Scale of the Challenge At Flo we don't just have users, we have a global community. We are the #1 women's health app, in the last month alone, we saw 8.6M new installs and a 2.8M increase in active users. When millions of people trust you with their most personal health data, security isn't a feature — it's a foundation. We are looking for a Cloud Security Engineer to join Velocity , our Internal Platform team. Your mission is to ensure that every system, pipeline, and tool our engineers rely on is secure by default — so they can ship fast without ever compromising trust. The Mission: Velocity The Velocity team exists to eliminate friction. We build and own the foundation everything else runs on: cloud infrastructure, developer tooling, and SRE practices. You will: • Embed Security Into the Platform: Bake security, compliance, and best practices into the core stack so they're invisible to developers and impossible to skip. • Automate Everything: Drive security-as-code across infrastructure, CI/CD pipelines, and container lifecycles — making manual gates a thing of the past. What You Will Do • Cloud Security Posture: Own and continuously strengthen Flo's AWS security posture using tools like GuardDuty, Inspector, Security Hub, and SSM Patch Manager. • Container & Supply Chain Security: Harden container image security end-to-end — patch vulnerabilities automatically with Copacetic, sign and verify images with Cosign/Sigstore, and enforce policies at admission with Kyverno. • Policy as Code: Manage CI/CD security across the organisation using policy-as-code tooling (Kyverno, Checkov), ensuring standards are enforced programmatically. • Security Observability: Build visibility into security performance by measuring and visualising actionable metrics using tools like Databricks Dashboards or Looker. • High-Scale Privacy: Support the infrastructure for industry-leading privacy features, such as our TIME-recognised "Anonymous Mode." • Culture & Thought Leadership: Shape Flo's broader security culture through proactive engagement, documentation, and cross-team collaboration. What You Bring • Experience: 7+ years in Infrastructure Security, Cloud Security, or Security Engineering roles. • Cloud Native Mastery: Deep expertise in AWS security services and best practices is essential. • Infrastructure as Code: Proficient in Terraform and Terragrunt — you run everything as code. • Container Security: Strong knowledge of Kubernetes security, image hardening, and admission control. • Identity & Access: Solid understanding of identity management principles — SSO, OAuth, JWT, SAML. • Automation Mindset: Comfortable scripting in Python, Bash, or similar to automate security workflows.</

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.