Staff Engineer, Cloud Security
New
T
ToastCloud security
Location: Remote, USFull-TimeStaff
Salary193,000 - 309,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of experience in security engineering, infrastructure, or software engineering, with significant time focused on cloud security.
- Required Skills
- AWSPythonGoTerraform
Requirements
- Bring 8+ years of experience in security engineering, infrastructure, or software engineering, with significant time focused on cloud security.
- Have deep, hands-on experience securing AWS environments at scale, including IAM, Organizations, networking, logging, and core security services.
- Have experience deploying and operating cloud security tooling such as CNAPP or CSPM platforms.
- Have experience with container and Kubernetes security, such as EKS.
- Have experience performing threat modeling and security architecture reviews for cloud services and platform capabilities.
- Have experience responding to security incidents in cloud environments.
- Be proficient with infrastructure as code, such as Terraform, and at least one automation programming language, such as Python or Go.
- Have a track record of leading cross-team technical initiatives and influencing engineering teams without direct authority.
- Have set technical direction for a security domain, including a multi-year roadmap and the decisions behind it.
- Communicate clearly in writing and verbally, including explaining risk and tradeoffs to engineers and leaders.
Responsibilities
- Own and operate the Cloud-Native Application Protection Platform (CNAPP), tuning coverage and integrations and turning findings into prioritized work.
- Lead cloud security posture management across the AWS organization and accounts, defining standards and measuring adherence.
- Drive identity and access management improvements, including least privilege, role and permission design, and reducing standing access.
- Secure container environments, including image and workload security, cluster configuration, and runtime protection.
- Build guardrails and secure defaults into infrastructure as code and deployment pipelines.
- Perform secure architecture reviews and threat modeling for cloud services and platform capabilities.
- Partner with the SOC on cloud detection coverage, logging, and investigation readiness.
- Run cloud vulnerability and misconfiguration remediation programs with engineering owners.
- Participate in security incident response, including on-call coverage, and lead cloud investigations and follow-up work.
- Set multi-year cloud security direction, mentor engineers, and influence engineering priorities.
View Full Description & ApplyYou'll be redirected to the employer's site
