Job Description
💼 Position: Staff Cloud Security Engineer
\n
💵 Salary: $280,000 – $320,000 total compensation
\n
🌍 Location: New York, NY (5 days in office)
\n
\n
Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?
\n
\n
This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.
\n
\n
This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale.
\n
\n
What you’ll be doing:
\n
- \n
- Design and implement cloud security architecture across GCP (primary) and AWS
- Write and own Terraform at scale, building reusable, secure infrastructure modules
- Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)
- Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)
- Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening
- Design secure platform primitives rather than one-off controls
- Implement logging, monitoring, and detection pipelines for cloud environments
- Lead threat modelling and architecture reviews for new systems
- Act as a technical leader, raising the bar through code reviews and system design
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
What we’re looking for:
\n
- \n
- Strong platform / DevOps engineering background with a security focus
- Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines
- Experience working in GCP (preferred), AWS (acceptable), or Azure (workable)
- Proven track record of building secure cloud infrastructure, not just consuming tools
- Strong understanding of IAM, networking, and distributed systems security
- Ability to operate independently at staff level, owning technical direction
- Comfortable working in high-performance, fast-paced environments
\n
\n
\n
\n
\n
\n
\n
\n
\n
Nice to have:
\n
- \n
- Experience with Spacelift or similar IaC orchestration tools
- Familiarity with policy-as-code (OPA, etc.)
- Experience designing multi-account / multi-project cloud architectures
- Background in high-growth startups or infrastructure-heavy environments
\n
\n
\n
\n
\n
\n
What’s in it for you:
\n
- \n
- Work on cutting-edge AI infrastructure used by top-tier financial institutions
- Join a high-talent-density team with strong engineering standards
- Real ownership of cloud security strategy and architecture
- Build systems where security is engineered—not enforced
- Excellent benefits, daily meals, and a high-performance environment
\n
\n
\n
\n
\n
\n
\n
\n
+1 212 970 7603