Senior Software Engineer II, Cloud Security

Role overview

Build the technical controls that protect production cloud infrastructure and the sensitive information it processes. As a senior individual contributor on a small cloud security team, you will spend most of your time writing infrastructure and software, setting patterns other engineers can follow, and working closely with reliability, platform, and application security colleagues.

Responsibilities - Implement secure cloud account structure, identity roles, permission boundaries, network segmentation, and encryption controls using infrastructure as code and software. - Secure Kubernetes through admission policies, access controls, network rules, workload identity, runtime safeguards, and maintained container images. - Create reusable infrastructure modules and continuous integration policy checks that make secure configurations easier to adopt. - Build and tune detections using cloud audit trails, Kubernetes logs, and runtime signals; develop the supporting services and pipelines. - Replace persistent access with temporary credentials, just-in-time workflows, and managed secrets for people, services, and build systems. - Investigate cloud alerts and incidents, remediate underlying causes, and review infrastructure proposals with engineering partners.

Requirements - Six or more years in cloud security, infrastructure, site reliability, or platform engineering, including at least three years focused on securing production cloud environments. - Hands-on experience with cloud identity and access, organization-level controls, networking, encryption, and logging. - Production Kubernetes security experience, including access policy, network controls, workload identity, and container hygiene. - Strong infrastructure-as-code skills and practical programming experience for security tooling and automation. - Ability to build controls and detections that engineers can operate, and to investigate and resolve infrastructure security issues. - Clear communication and collaboration skills for code reviews, design discussions, and incident response.

Nice to have

Experience in regulated industries, detection engineering or digital forensics and incident response, or using language models and agents to support security operations.

Benefits and work setup

The organization describes itself as remote-first and offers health coverage, retirement savings, commuter support, professional development, parental leave, and flexible time off.