Sr. Staff Cloud Security Engineer

What you'll do

• Own cloud, application, and zero trust security architecture, including blueprints, guardrails, and secure design patterns for cloud-native microservices on AWS.
• Secure our AI and machine learning systems, including LLM-powered features, by threat modeling AI-specific risks and implementing practical mitigations.
• Build and scale detection engineering and monitoring pipelines across our cloud infrastructure and Kubernetes environments.
• Lead incident response: develop automated playbooks, run root-cause investigations on complex cloud security events, and test the team through regular tabletop exercises.
• Secure the SDLC, including CI/CD automation, container security, vulnerability management, design reviews, and internal testing of new services and enhancements.
• Perform threat modeling and architecture reviews on complex distributed systems and data flows.
• Support the customer security team by explaining our security controls directly to customers during technical deep-dives.

What you'll need

• Cloud security, detection, and incident response. 8+ years of experience in cloud security, application security, and security architecture in modern distributed environments. You’ve built detection engineering and SIEM/SOAR pipelines, analyzed logs at scale using AI, and led real incident response and threat hunting.
• Hands-on Kubernetes security. You’ve secured, monitored, and investigated incidents in production Kubernetes and containerized environments.
• Hands-on security testing of cloud-native stacks. You’ve secured and tested modern application architectures (microservices, APIs, containers) in the cloud, with deep AWS experience.
• AI security. You’re familiar with the latest AI threats and mitigation techniques, such as prompt injection, data leakage, model and supply chain risks, and abuse of AI agents and integrations, and you know how to apply defenses in real production systems.
• Deep technical skills. You can move from architecture diagrams to code, config, and logs. You can build as well as advise.
• Excellent communication, including with customers. You can explain complex security concepts and our under-the-hood controls to customer security teams, executives, and engineers alike.
• Startup pace. Proven success in a high-growth startup, with adaptability, autonomy, and rapid execution.

What we'd like to see

• Software or infrastructure engineering background, with experience building production systems
• Experience integrating security (GHAS, SAST/DAST, etc.) into CI/CD tools such as Codefresh, ArgoCD, or GitLab CI
• Strong Infrastructure-as-Code experience (Terraform)
• End-to-end vulnerability management across applications and cloud infrastructure
• Encryption and secrets management (HashiCorp Vault, AWS KMS)
• Experience designing and documenting security solution architectures
• Familiarity with frameworks such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, or NIST AI RMF
• B.S. in Computer Science or a related field, or equivalent experience