Senior Security Engineer, Cloud

About the Company

Our client is a publicly traded, cloud-first SaaS platform that thousands of global brands rely on to engage their customers. The platform processes data at massive scale for some of the most recognizable companies in the world, which means security is not a checkbox here. It is core to the business.

Since going public, the company has been scaling globally, and leadership has made security engineering a top investment. Security operates as its own engineering organization reporting to the CISO, fully separate from IT and DevOps.

What You’ll Actually Be Working On

The platform runs on AWS and a large self-managed Kubernetes footprint, with engineering teams shipping constantly. The security team’s job is to make the secure path the easy path and to catch what slips through.

This includes:

• Guardrails and secure-by-default patterns across AWS and Kubernetes, built in Terraform and Python
• Detections written as code for cloud and infrastructure telemetry
• Cloud forensics and incident response when something real happens
• Securing AI agents and LLM-powered features as the company builds them into the product

About the Role

This is a hands-on security engineering role. You will build controls, write detections, and run incidents yourself, rather than manage them through vendor consoles.

This is not a DevSecOps role.

This is not a SOC analyst role.

This is not a GRC or compliance role.

The ideal candidate is a true security engineer who writes code, has owned cloud security inside a dedicated security organization, and wants to work on a team where security leads instead of reacts.

What You Will Do

• Design and build security guardrails across AWS and self-managed Kubernetes using Terraform and Python
• Write, tune and own high-signal SIEM detections for cloud and infrastructure telemetry
• Lead cloud forensics and incident response from first signal through root cause and remediation
• Drive threat modeling with engineering teams on new systems and features
• Strengthen CI/CD and software supply chain security
• Help define how the company secures AI agents, LLM features and agentic workflows
• Participate in the security on-call rotation
• Partner with engineering leadership on long-term security architecture

What We Are Looking For

• 5+ years of hands-on security engineering experience
• Most recent experience reporting into a dedicated security organization, not IT or DevOps
• Production cloud security experience on AWS
• Hands-on Kubernetes security experience, ideally on self-managed clusters
• Has personally written detections, built security controls, and automated security work in code
• Has led real incident response and forensics investigations end to end
• Experience at a technology-driven company with a strong security engineering culture

Senior-Level Expectations

• You have been the person engineers come to when they need a security decision made
• You have built security programs or controls from the ground up, not just maintained them
• You are comfortable owning ambiguous, high-impact problems with limited direction

Nice To Have

• Experience securing AI agents, LLM-driven systems or agentic workflows
• GCP experience alongside AWS
• Supply chain security experience (artifact signing, SBOMs, secrets management)
• A background in SRE or platform engineering before moving fully into security
• Certifications such as GIAC, OSCP, CISSP or AWS Security Specialty

This Role Is Not A Fit If

• Your experience is primarily in DevOps or platform engineering with security as a side responsibility
• Your security work has been mostly monitoring alerts rather than building controls and detections
• You have not personally led incident response on real production systems
• Your background is primarily compliance, audit or GRC
• You prefer managing security tools over writing code

Compensation and Benefits

• Salary range: $150,000 to $235,000 USD depending on experience, with flexibility for the right person
• Annual bonus
• Competitive equity package (RSUs) and ESPP
• 401(k) program
• Comprehensive health, dental, and vision coverage
• Flexible PTO and paid holidays
• Paid parental leave
• Mostly remote, with the NYC office about once a month

Why This Role Matters

The systems this team protects are trusted by thousands of global brands and their customers.

The guardrails, detections and response capabilities you build will directly shape how securely the company scales worldwide.

If you are a security engineer who wants to build, not just monitor, this role was built for you.