Cloud Security Engineer

Position: Staff Cloud Security Engineer Salary: $280,000 – $320,000 total compensation Location: New York, NY (5 days in office) Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets? This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows. This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale . What you’ll be doing: Design and implement cloud security architecture across GCP (primary) and AWS Write and own Terraform at scale, building reusable, secure infrastructure modules Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation) Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first) Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening Design secure platform primitives rather than one-off controls Implement logging, monitoring, and detection pipelines for cloud environments Lead threat modelling and architecture reviews for new systems Act as a technical leader, raising the bar through code reviews and system design What we’re looking for: Strong platform / DevOps engineering background with a security focus Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines Experience working in GCP (preferred), AWS (acceptable), or Azure (workable) Proven track record of building secure cloud infrastructure, not just consuming tools Strong understanding of IAM, networking, and distributed systems security Ability to operate independently at staff level, owning technical direction Comfortable working in high-performance, fast-paced environments Nice to have: Experience with Spacelift or similar IaC orchestration tools Familiarity with policy-as-code (OPA, etc.) Experience designing multi-account / multi-project cloud architectures Background in high-growth startups or infrastructure-heavy environments What’s in it for you: Work on cutting-edge AI infrastructure used by top-tier financial institutions Join a high-talent-density team with strong engineering standards Real ownership of cloud security strategy and architecture Build systems where security is engineered—not enforced Excellent benefits, daily meals, and a high-performance environment View phone number on click.appcast.io