Lead Engineer, Cloud Security

What you'll do

• Serve as the senior technical lead for the Cloud Security Platform and CSPM capability.
• Own the end-to-end engineering, deployment, configuration, and ongoing operation of the CSPM/CNAPP platform.
• Manage the platform as a production system by owning its availability, performance, and on-call response.
• Define and tune the CSPM policy set based on secure configuration benchmarks and reference architecture.
• Design and manage the findings pipeline to aggregate, deduplicate, and ship security signals to remediation dashboards.
• Drive multi-quarter initiatives from initial problem framing and scoping through to rollout and steady-state operation.
• Integrate cloud security telemetry into enterprise SIEM/SOAR pipelines and remediation systems.
• Mentor engineers on cloud security, platform engineering practices, and code quality standards.

What we're looking for

• 4-year degree or equivalent work experience.
• 7+ years of hands-on experience in technology with deep experience in cloud security, CSPM, Kubernetes, IaC/CI-CD, and automation.
• Demonstrated experience as a senior IC or tech lead owning a security or platform capability end-to-end at enterprise scale.
• Deep hands-on experience deploying, operating, and tuning a CSPM or CNAPP platform in a large multi-cloud environment.
• Hands-on experience with public cloud (GCP preferred; AWS/Azure experience also valued) and private cloud/Kubernetes environments.
• Strong working knowledge of infrastructure as code (Terraform) and policy-as-code (Rego).
• Automation-first mindset with hands-on fluency in at least one general-purpose language such as Python or Go.
• Working knowledge of security frameworks and standards such as NIST, CIS Benchmarks, and ISO/IEC 27001.