Staff Cloud Security Engineer

Responsibilities: Lead cloud and Kubernetes security improvements including workload identity, policies, and network protections. Operate cloud security tooling, prioritize findings by risk, remediate vulnerabilities, and harden container images. Enhance WAF rules, rate limits, bot defenses, and anomaly detection to balance security with user experience. Build maintainable security automation and review infrastructure as code for secure adoption. Create self-service patterns for securely exposing new services and connecting AI tools/MCP integrations to approved data. Partner with engineering to implement data-protection controls with CI checks and evidence of effectiveness. Guide cross-team security decisions, mentor engineers, and support incident response and on-call responsibilities.

Key requirements: 8+ years working with public-cloud infrastructure 5+ years in cloud security engineering Experience securing GCP and GKE environments Hands-on experience securing production cloud infrastructure and Kubernetes workloads Experience using infrastructure as code (e.g., Terraform) Programming experience in Python or Go for security automation Ability to translate security requirements into practical controls and tests Proven record of leading complex technical work across teams and communicating tradeoffs collaboration clear communication mentorship GCP GKE workload identity