Senior Cloud Security Engineer

Responsibilities

• Own the security posture of production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.
• Own runtime security coverage across Kubernetes environments from deployment through anomalous-activity detection.
• Partner with engineering on secure infrastructure architecture and production environment design.
• Manage cloud security posture management end to end, including triage, prioritization, and remediation.
• Define and drive cloud infrastructure security standards for baseline configurations, infrastructure-as-code, key management, and secrets management.
• Drive fine-grained, role-based access to production with engineering and IT.
• Feed infrastructure findings into vulnerability management and risk reporting.

Requirements

• 8+ years of security engineering experience focused deeply on cloud and infrastructure security.
• Hands-on experience securing multi-cloud environments with AWS and Azure and container platforms with Kubernetes.
• Strong grounding in infrastructure-as-code, cloud networking, and cloud identity and access management.
• Experience with CSPM and runtime security tooling and prioritizing findings into actionable work.
• Ability to independently own cloud infrastructure security, set its direction, and make sound cross-team tradeoffs.
• Experience working directly with engineers on architecture and remediation.
• Experience securing multi-tenant production systems or environments running customer workloads is preferred.
• Familiarity with Upwind or similar CSPM and runtime platforms is preferred.
• Experience contributing to SOC 2 or ISO 27001 evidence from the infrastructure side is preferred.
• Background in AI or ML platforms or distributed systems is preferred.

Benefits

• The role is based in the San Francisco Bay Area.