Security Engineer, Cloud
Security Engineer building and hardening cloud-native security controls, infrastructure-as-code, and CI/CD pipelines for a scalable platform. Requires 8+ years in infrastructure/platform security and deep expertise in AWS/GCP and Kubernetes.
About the job
What you will do
- Design and implement scalable security controls across our cloud-native platform.
- Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
- Build secure by default infrastructure and code CI/CD pipelines.
- Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
- Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
- Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
- Drive improvements in monitoring, detection, and incident response at the platform level.
- Build, deploy and maintain relevant tooling.
About you
- 8+ years of experience in infrastructure or platform security roles.
- Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening.
- Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security.
- Skilled at balancing engineering realities with principled security practices.
- Proven track record of shipping secure, resilient systems at scale.
Bonus if you
- Have built or scaled security automation pipelines.
- Contributed to open-source security projects or tools.
- Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP.
- Hold a bachelors or masters degree in Cybersecurity or similar disciplines.
Benefits
- Competitive compensation package, including equity.
- Inclusive Healthcare Package.
- Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
- Flexible Time Off.
- We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
Skills
AWS, GCP, Terraform, Cdk, Kubernetes, CI/CD, Identity And Access Management, Threat Modeling, Incident Response, Security Automation
Similar jobs
Security Engineering jobs
Spade
United StatesOwns production-edge security for enterprise financial-institution connectivity, including PKI, mTLS, AWS networking, webhook security, and vulnerability remediation. Requires 6+ years of hands-on platform, infrastructure, or network security engineering experience.
Snowflake
Menlo Park, CABuild secure, large-scale platforms, controls, monitoring, and AI-augmented pipelines that improve Snowflake’s cloud security posture across hundreds of millions of assets and multiple cloud providers. Requires 5+ years of software engineering experience and expertise in secure distributed systems.
Atomicmachines
Emeryville, CALeads enterprise network architecture, cloud connectivity, security, operations, and incident response across corporate and manufacturing environments. Requires 10+ years of network engineering experience, people leadership, AWS networking expertise, and strong network security knowledge.
Anyscale
IndiaOwn detection engineering and lead incident response across corporate and production environments, building cloud, endpoint, runtime, and Kubernetes coverage. The role requires 6+ years in security, hands-on detection development, and end-to-end incident leadership.
Anyscale
San Francisco, CA
Own and advance the security of Anyscale’s production and multi-cloud infrastructure, including hardening, segmentation, Kubernetes runtime protection, and access controls. Requires 8+ years of security engineering experience and hands-on expertise with AWS, Azure, Kubernetes, and cloud security tooling.