Webflow is hiring a Senior Security Engineer, Cloud Security

Webflow is seeking a Senior Security Engineer, Cloud Security to lead and execute initiatives that strengthen our infrastructure and operational security posture. You will focus on hardening our cloud environment, ensuring secure-by-design principles in AWS infrastructure, and meeting security needs at the intersection of architecture, DevOps, and automation.

What You'll Do

• Design, implement, and maintain secure AWS infrastructure following best practices like least privilege, network segmentation, encryption, and monitoring.
• Partner with infrastructure and platform teams to embed security controls in CI/CD pipelines, infrastructure as code, and containerized environments.
• Own the cloud security posture management strategy, ensuring continuous compliance and automated detection of misconfigurations.
• Evaluate and deploy security tooling for cloud visibility, IAM governance, and intrusion detection.
• Collaborate with engineering teams to secure Kubernetes and containerized workloads, ensuring adherence to runtime and image scanning policies.
• Respond to and investigate cloud-related security incidents, providing technical expertise during triage and remediation.
• Contribute to the design and execution of Webflow’s cloud security roadmap, identifying areas for automation and scalability.
• Conduct threat modeling and risk assessments for cloud architecture and new service deployments.
• Develop internal tools and scripts to enhance cloud monitoring and detection capabilities.
• Stay current with evolving AWS services, vulnerabilities, and security trends to proactively enhance Webflow’s defenses.

What We're Looking For

• BA/BS Degree or equivalent experience.
• 5+ years of experience in cloud security, infrastructure engineering, or DevSecOps.
• At least 3 years focused on AWS.
• Strong knowledge of AWS services and security controls.
• Hands-on experience securing Kubernetes and containerized workloads.
• Proficient with infrastructure as code like Pulumi, Terraform, or CloudFormation.
• Understand network security concepts including firewalls, segmentation, and zero trust.
• Can script or automate security tasks using Python, Go, or Bash.
• Communicate clearly and collaborate effectively across security, DevOps, and product teams.
• Bring a proactive, builder’s mindset—identifying and closing gaps before they become issues.

Nice to Have

• Experience with multi-account AWS architectures and security guardrail enforcement via Control Tower or Organizations.
• Familiarity with secrets management solutions.
• Knowledge of threat detection and response in serverless or containerized environments.
• Contributions to open-source security tools or participation in cloud security communities.

Technical Stack

• Cloud: AWS
• Orchestration: Kubernetes
• Infrastructure as Code: Pulumi, Terraform, CloudFormation
• Scripting/Automation: Python, Go, Bash

Team & Environment

This role is part of the Security Operations team, collaborating closely with Infrastructure Engineering, Security DevOps, and Application Security teams.

Benefits & Compensation

• Equity ownership (RSUs)
• 100% employer-paid healthcare, vision, and dental insurance coverage for full-time employees and their dependents
• 12 weeks of paid parental leave for both birthing and non-birthing caregivers
• Additional 6-8 weeks of pregnancy disability leave for birthing parents
• Access to family planning care and reimbursement
• Flexible PTO for all locations and sabbatical program
• Access to mental wellness and professional coaching, therapy, and Employee Assistance Program
• Monthly stipends to support work and wellness
• 401k plan or pension schemes (in countries where statutorily required)
• Financial wellness benefits, like CPA and financial advisor coverage

Work Mode

This role is local-country based in Buenos Aires or Remote within Argentina.

At Webflow, equality is a core tenet of our culture. We are an Equal Opportunity (EEO)/Veterans/Disabled Employer and are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law.