Senior Cloud Security Validation Engineer

Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We are looking for a Cloud Security Validation Engineer to join our engineering team. The team faces complex engineering issues on a daily basis, both solving new challenges and constantly improving the existing solutions. We work with all major cloud providers (AWS, GCP, Azure) and use cutting-edge technologies such as Kubernetes, Docker, Neo4j, ElasticSearch, Redis, TimescaleDB, RabbitMQ, and more. **Responsibilities** - Design, implement, and automate validation of cloud and runtime security features. - Build and maintain **Python-based frameworks** for **eBPF-based test hooks** for kernel-level observability.. - Expertise on **cloud environments (AWS / Azure / GCP)** to deploy and test sensors and agents. - Integrate automated test pipelines using **Jenkins / GitHub Actions / GitLab CI**. - Work closely with kernel engineers to reproduce and debug cloud-runtime issues. - Hands-on with **AWS / GCP / Azure** configurations. - Strong Python automation skills (pytest, REST API testing, JSON/YAML). - Familiar with **Linux kernel modules, syscalls, namespaces, cgroups**. - Experience with **eBPF** is highly desirable. - Hands-on with **Kubernetes**, **Pods**, **Docker**, **Containers**, **Terraform**, **Grafana** - Exposure to Serverless containers Fargate and Cloudrun