What You'll Do
We're looking for a Staff Cloud Security Engineer to help lead the security of our cloud platform. You'll design, build, and operate the controls that protect our infrastructure end to end - so the enterprise marketers who rely on Typeface can move fast with confidence that their brands, content, and data are safe.
This is your chance to shape how a fast-growing AI company secures the cloud - not just by finding risks, but by building secure-by-default systems, guardrails, and automation that let every team ship faster and safer.
How You'll Make an Impact:
- Lead the design and implementation of security architecture across our cloud environments - from identity and networking to data protection and workload security
- Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks
- Own identity and access management, applying least-privilege principles across accounts, services, and users
- Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy
- Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution
- Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001
- Partner with incident response to investigate and remediate cloud security events
- Mentor and support teammates, helping to shape a strong, security-first engineering culture
What You Bring:
- 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale
- Bachelor's or Master's degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
- Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services
- Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)
- Strong understanding of IAM, network security, encryption, key management, and secrets management
- Scripting or programming skills (Python, Go, or Bash) to automate security controls
- Excellent communication skills and the ability to thrive independently and in collaborative teams
- Experience supporting B2B or enterprise SaaS products
- Bonus: Background securing AI or generative AI systems
- Bonus: Industry certifications such as AWS Certified Security - Specialty, CCSP, or CISSP
Location
This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.
Base Salary
The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.