Remote Jobs RockRemote Jobs Rock

Sr. Staff Cloud Security Engineer

🕒 5 days ago
Cloud SecurityApplication SecuritySecurity ArchitectureAWS
Apply Now

📜 Description

  • Own cloud, application, and zero-trust security architecture, guardrails, and secure design patterns for AWS microservices.
  • Threat-model AI and machine-learning systems, including LLM-powered features, and implement practical mitigations.
  • Build detection engineering and monitoring pipelines across cloud infrastructure and Kubernetes.
  • Lead incident response, automate playbooks, investigate root causes, and run tabletop exercises.
  • Secure the SDLC through CI/CD automation, container security, vulnerability management, design reviews, and testing.
  • Review distributed-system architectures and explain security controls to customers during technical deep-dives.

🛠️ Requirements

  • 8+ years of experience in cloud security, application security, and security architecture in distributed environments.
  • Experience building detection and SIEM/SOAR pipelines, analyzing logs at scale, threat hunting, and leading incident response.
  • Hands-on experience securing production Kubernetes, containers, cloud-native applications, APIs, and AWS environments.
  • Knowledge of AI security threats and mitigations, including prompt injection, data leakage, model and supply-chain risks, and AI-agent abuse.
  • Strong technical ability across architecture, code, configuration, and logs; able to build as well as advise.
  • Excellent communication with customer security teams, executives, and engineers.
  • Experience succeeding in a high-growth startup with adaptability, autonomy, and rapid execution.
  • Software or infrastructure engineering background; Terraform, CI/CD security, vulnerability management, encryption, and secrets-management experience are valued. B.S. in Computer Science or related field, or equivalent

✨ Benefits

  • Competitive compensation
  • Stock options
  • Healthcare for the family group
  • Mac equipment
  • USD 150 per month in flexible benefits
  • 3 weeks of vacation
  • English lessons
  • ASAPP - Sr. Staff Cloud Security Engineer
Full job description

At ASAPP, our mission is simple: deliver the best AI-powered customer experience—faster than anyone else. To achieve that, we’re guided by principles that shape how we think, build, and execute. We value customer obsession, purposeful speed, ownership, and a relentless focus on outcomes. We work in tight, skilled teams, prioritize clarity over complexity, and continuously evolve through curiosity, data, and craftsmanship. We’re seeking technologists and problem solvers who thrive in fast-paced environments, love collaborating with great talent, and approach every day like it’s Day 1.

We're a globally diverse team with hubs in New York City, Mountain View, Latin America, and India. If you're driven by continuous learning, rapid pivots, and the challenges of building in a high-growth startup, we’d love to talk. This is more than a job—it’s a journey.

We are looking for a full-time Sr. Staff Cloud Security Engineer to design, test, and strengthen the security of our complex, distributed, cloud-native microservices platform, which runs primarily on AWS. This is a high-impact, hands-on role. You’ll pair deep technical expertise with excellent communication to work alongside senior leaders, security engineers, and the broader engineering organization.

You’ll drive cloud and application security architecture, build out and mature detection engineering capabilities, lead security incident response, and safeguard our AI-driven solutions across the entire product lifecycle. As a key technical leader on the security team, you’ll hold broad architectural responsibility for application, cloud infrastructure, and AI security, threat modeling, and defensive engineering. You’ll also be a trusted technical voice with our customers, explaining our under-the-hood security measures with clarity and credibility. We prefer candidates with an engineering background: people who build solutions, not just assess them.

ASAPP is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, or veteran status. If you have a disability and need assistance with our employment application process, please email us at careers@asapp.com to obtain assistance. #LI-SL1 #LI-Remote

What you'll do

  • Own cloud, application, and zero trust security architecture, including blueprints, guardrails, and secure design patterns for cloud-native microservices on AWS.
  • Secure our AI and machine learning systems, including LLM-powered features, by threat modeling AI-specific risks and implementing practical mitigations.
  • Build and scale detection engineering and monitoring pipelines across our cloud infrastructure and Kubernetes environments.
  • Lead incident response: develop automated playbooks, run root-cause investigations on complex cloud security events, and test the team through regular tabletop exercises.
  • Secure the SDLC, including CI/CD automation, container security, vulnerability management, design reviews, and internal testing of new services and enhancements.
  • Perform threat modeling and architecture reviews on complex distributed systems and data flows.
  • Support the customer security team by explaining our security controls directly to customers during technical deep-dives.
  • What you'll need

  • Cloud security, detection, and incident response. 8+ years of experience in cloud security, application security, and security architecture in modern distributed environments. You’ve built detection engineering and SIEM/SOAR pipelines, analyzed logs at scale using AI, and led real incident response and threat hunting.
  • Hands-on Kubernetes security. You’ve secured, monitored, and investigated incidents in production Kubernetes and containerized environments.
  • Hands-on security testing of cloud-native stacks. You’ve secured and tested modern application architectures (microservices, APIs, containers) in the cloud, with deep AWS experience.
  • AI security. You’re familiar with the latest AI threats and mitigation techniques, such as prompt injection, data leakage, model and supply chain risks, and abuse of AI agents and integrations, and you know how to apply defenses in real production systems.
  • Deep technical skills. You can move from architecture diagrams to code, config, and logs. You can build as well as advise.
  • Excellent communication, including with customers. You can explain complex security concepts and our under-the-hood controls to customer security teams, executives, and engineers alike.
  • Startup pace. Proven success in a high-growth startup, with adaptability, autonomy, and rapid execution.
  • What we'd like to see

  • Software or infrastructure engineering background, with experience building production systems
  • Experience integrating security (GHAS, SAST/DAST, etc.) into CI/CD tools such as Codefresh, ArgoCD, or GitLab CI
  • Strong Infrastructure-as-Code experience (Terraform)
  • End-to-end vulnerability management across applications and cloud infrastructure
  • Encryption and secrets management (HashiCorp Vault, AWS KMS)
  • Experience designing and documenting security solution architectures
  • Familiarity with frameworks such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, or NIST AI RMF
  • B.S. in Computer Science or a related field, or equivalent experience
  • Benefits

  • Competitive compensation
  • Stock options
  • Healthcare for the family group
  • Mac equipment
  • USD 150 per month in flexible benefits
  • 3 weeks of vacation
  • English lessons
  • Fuse Energy

    Senior/Lead Security Engineer (Detection & Response)

    🕒 17 days ago
    Fuse Energy👥 201 - 500 employees🏢 Energy

    Own detection and response across cloud, identity, endpoints, networks, SaaS, and data center systems by building monitoring pipelines, leading investigations, automating security workflows, and improving controls.

    Detection EngineeringIncident ResponseThreat HuntingAWS
    Olo

    Staff Security Engineer - Blue Team (UK)

    🕒 10 days ago
    Olo👥 201 - 500 employees🏢 Technology

    Lead the Blue Team’s security programs and technical direction, overseeing threat detection, incident response, vulnerability management, and cloud security while mentoring engineers and reducing risk across Olo’s services.

    Security EngineeringSecurity OperationsSecurity ArchitectureIncident Response
    Fullscript

    Staff Security Engineer, AI-Driven Detection & Response

    🕒 16 days ago
    Fullscript👥 11 - 50 employees🏢 Health, Wellness And Fitness

    Define and lead detection engineering, incident response, and AI-assisted security operations across cloud, identity, endpoint, and application systems, improving threat coverage and response through automation and defensive testing.

    Detection EngineeringIncident ResponseAI-assisted SecopsSIEM
    Nubank

    Lead Security Engineer - GRC

    🕒 9 days ago
    Nubank👥 5001 - 10,000 employees🏢 Financial Services

    Leads third-party risk, cyber risk, and security awareness programs by assessing security gaps, prioritizing treatment plans, and scaling controls, automation, and reporting across global teams.

    Third-party Risk ManagementCyber Risk ManagementSecurity AwarenessRisk Assessment And Prioritization
    Chainguard

    Principal Product Security Engineer

    🕒 8 days ago
    Chainguard👥 10,000+ employees🏢 Computer And Network Security🤝 B2B

    Sets product security direction across major products, leads multi-quarter risk-reduction programs, and embeds secure-by-design practices, automation, and practical controls into engineering workflows.

    Product SecuritySecure ArchitectureCloud-native SecurityDistributed Systems

    Trusted by Remote Workers