Senior Cloud Security Engineer
- Role
- Security
- Experience
- Senior
- Employment
- Full-time
Open to US only. Set where you work from to check your eligibility.
No BS summary
Senior Cloud Security Engineer, 8+ years, based in the San Francisco Bay Area. Hands-on cloud security for AWS and Azure and runtime security for Kubernetes required. Strong experience with infrastructure-as-code, cloud networking, identity/access, CSPM and runtime security tooling.
Core skills
Required skills
Optional skills
SENIOR CLOUD SECURITY ENGINEER
uber.youtube.com/watch?
With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert.
ABOUT THE ROLE
Anyscale's security needs are growing as we operate more production and cloud infrastructure for larger and more demanding customers. We're looking for a Senior Cloud Security Engineer to own the security of that infrastructure. This is a hands-on, high-ownership role: you will own how our production and cloud environments are hardened, isolated, and monitored.
You will set and drive the direction for infrastructure and production security, reporting to the Head of Security and partnering closely with the wider engineering organization. This role is based in the San Francisco, Bay Area. In your first year, success looks like hardened and well-segmented production environments, strong runtime security coverage across our container footprint, and a clear, defensible story for how we secure the infrastructure our customers rely on.
WHAT YOU'LL DO
- Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.
- Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity.
- Partner with engineering on secure infrastructure architecture and the secure design of our production environments.
- Own cloud security posture management end to end: triage, prioritization, and driving remediation with the teams that own the resources.
- Define and drive cloud infrastructure security standards: baseline configurations, infrastructure-as-code security, and key and secrets management.
- Drive fine-grained, role-based access to production, in partnership with engineering and IT.
- Feed infrastructure findings into vulnerability management and risk reporting.
WHAT YOU'LL BRING
- 8+ years in security engineering, with a deep focus on cloud and infrastructure security, ideally at a high-growth startup.
- Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes).
- Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments.
- Experience with CSPM and runtime security tooling, and the judgment to turn findings into prioritized, actioned work.
- The ability to own cloud infrastructure security independently, set its direction, and make sound tradeoffs across teams.
- Fluency working directly with engineers on architecture and remediation, not just producing findings.
NICE TO HAVE
- Experience securing multi-tenant production systems or environments that run customer workloads.
- Familiarity with Upwind or similar CSPM and runtime platforms.
- Experience contributing to SOC 2 or ISO 27001 evidence from the infrastructure side.
- Background in AI or ML platforms or distributed systems.
What you'll do
- Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.
- Own runtime security coverage across Kubernetes environments, from deployment through detection of anomalous activity.
- Partner with engineering on secure infrastructure architecture and secure design of production environments.
- Own cloud security posture management end to end: triage, prioritization, and driving remediation with resource owners.
- Define and drive cloud infrastructure security standards: baseline configs, infrastructure-as-code security, and key/secrets management.
What they require
- 8+ years in security engineering with a deep focus on cloud and infrastructure security
- Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes)
- Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments
- Experience with CSPM and runtime security tooling and the judgment to turn findings into prioritized, actioned work
- Ability to own cloud infrastructure security independently and partner directly with engineers on architecture and remediation
At Anyscale, we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We're commercializing Ray, a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI, Uber, Spotify, Instayscale, Cruise, and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world.With Anyscale, we're building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert.Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date.