# Staff Security Engineer, Cloud and Product Security

**Company:** [Lob](https://hotfix.jobs/companies/lob)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $198k – $220k/yr
**Experience:** 8+ years
**Skills:** AWS, IAM, Terraform, Nomad, Cloudflare, Waf, SIEM, SAST, DAST, Kubernetes, Incident Response, Threat Modeling, Container Security, Vulnerability Management, Infrastructure As Code
**Posted:** 2026-08-18

> Own the technical security function across cloud infrastructure, detection and response, application security, incident response, and automation. The role requires 8+ years of security engineering experience, deep AWS expertise, and the ability to lead security improvements across engineering teams.

## Job Description

## Responsibilities
- Own security engineering across AWS cloud infrastructure, detection and response, application and product security, incident response, penetration testing, and security automation.
- Lead AWS security posture management, CNAPP initiatives, cloud misconfiguration risk reduction, infrastructure security reviews across Terraform and Nomad, and Cloudflare edge/WAF strategy.
- Build and operate a high-signal detection engineering practice on the SIEM, including alert triage ownership, runbooks, severity criteria, and false-positive reduction.
- Lead security incident response, escalation paths, tabletop exercises, and post-incident reviews; partner with IT on endpoint detection and vulnerability coverage.
- Own vulnerability management across SCA, SAST, DAST, and container scanning.
- Manage and mentor an application security contractor and route remediation work effectively into engineering teams.
- Conduct threat modeling and security architecture reviews for new products and significant changes.
- Improve secure SDLC practices and apply AI to security operations where it provides leverage.
- Own technical execution of the annual independent penetration test, including scope, findings triage, remediation routing, and retest coordination.
- Produce technical evidence supporting SOC 2, HIPAA, and Microsoft SSPA requirements without owning the audit or compliance program.
- Build security tooling and automation and ship security improvements through collaboration with Platform, Logistics, IT, and engineering teams.

## Requirements
- 8+ years of security engineering experience with meaningful depth in cloud security.
- Hands-on expertise with AWS security services, IAM design, and infrastructure as code.
- Demonstrated detection engineering experience, including writing and tuning detections and reducing false positives.
- Real incident response experience as a responder or lead.
- Application security fluency sufficient to review findings, assess severity, and evaluate exploitability with engineers.
- Track record of delivering security improvements through other teams by building trust.
- Ability to serve as the senior technical security voice in an organization without a large security team.

## Nice-to-haves
- Experience supporting SOC 2 Type 2, HIPAA, or Microsoft SSPA from the engineering side.
- Container and orchestration security experience, particularly with Nomad or Kubernetes.
- Cloudflare experience, including Zero Trust and WAF.
- Experience working with regulated or consumer-identifiable data at scale.
- Prior experience mentoring or managing engineers or contractors.

## Compensation
- Annual base salary: $197,500–$220,000, plus RSUs.
- Remote working opportunities are available in specified U.S. states.

## Similar jobs

- [Staff Engineer - Container Security](https://hotfix.jobs/jobs/935b4780-2b70-443a-b457-18e396232e5a) - Illumio - Sunnyvale, CA - $194k – $233k/yr
- [Staff Application Security Engineer](https://hotfix.jobs/jobs/7ac2e48a-851e-4e49-8cb6-83a44f82862c) - Upside - Remote - $210k – $230k/yr
- [Senior/Staff Engineer, Application & Product Security](https://hotfix.jobs/jobs/bbea2ee9-de73-49b9-9f12-7e521ec63875) - Grow Therapy - Remote - $182k – $288k/yr
- [Staff Security Engineer, Walrus](https://hotfix.jobs/jobs/4ba77cb9-dbba-48ea-b5b7-7affe4c71be8) - Mysten Labs - Remote - $180k – $264k/yr
- [Staff Software Engineer - Site Defense](https://hotfix.jobs/jobs/63710e8e-8a7b-47ad-8aa3-7c6ab86c292f) - Reddit - Remote - $217k – $304k/yr

**Apply:** https://hotfix.jobs/jobs/6f63ec23-4c3f-4815-b236-397f5ba0189d
**Canonical:** https://hotfix.jobs/jobs/6f63ec23-4c3f-4815-b236-397f5ba0189d