Staff Engineer, Cloud Security

Role overview Set technical direction for cloud security while building and operating the controls that protect cloud infrastructure and services. This hands-on staff role focuses primarily on AWS and combines security engineering with cross-team leadership, roadmap influence, and mentoring.

Responsibilities - Own and improve cloud-native security tooling, including its coverage, integrations, and prioritization of findings. - Establish cloud security posture standards across AWS accounts and track adherence. - Strengthen identity and access management through least-privilege roles and reduced standing access. - Secure container images, workloads, clusters, and runtime environments. - Build secure defaults and guardrails into infrastructure-as-code and deployment pipelines. - Lead architecture reviews, threat modeling, vulnerability remediation, and cloud incident investigations; partner with detection and response teams.

Requirements - At least eight years in security, infrastructure, or software engineering, including substantial cloud security work. - Deep practical experience securing AWS at scale, including IAM, Organizations, networking, logging, and core security services. - Experience deploying and operating CNAPP or CSPM tools. - Experience securing containers and Kubernetes environments. - Proficiency with infrastructure as code and an automation language such as Python or Go. - A record of leading cross-team initiatives, setting technical direction, mentoring engineers, and communicating risk clearly.

Nice to have - Experience with another major cloud platform, cloud detection engineering, or incident response. - Familiarity with PCI DSS, SOC 2, or similar frameworks, or relevant cloud security certifications.

Benefits and work setup The role follows a hybrid work model, with office expectations varying by region. Compensation includes base pay, and may include additional cash compensation, equity, and benefits; the stated base range varies by geographic pay zone.