Software Engineer - Staff Cloud Security Engineer
Arena Intelligence, Inc.3 days ago
Responsibilities
- Design workload identity models using least-privilege IAM, workload identity federation, and short-lived credentials.
- Own machine secrets, centralized storage, credential ownership, and production rotation processes.
- Define service access, outbound connection limits, environment separation, and boundaries for agent runtimes.
- Build detections and alerts for high-risk changes to cloud infrastructure and build systems, including documented response procedures.
- Implement cloud security checks in infrastructure code and build pipelines.
- Secure credentials and permissions used by source control, build pipelines, and cloud deployments.
- Assess vendor and managed-platform technical access before onboarding.
- Lead technical response and recovery for cloud infrastructure security events.
- Maintain visibility into cloud security posture and participate in the security on-call rotation.
Requirements
- 6+ years of security or infrastructure engineering experience, including at least 3 years focused on production cloud security.
- Deep, current, hands-on experience securing AWS, GCP, and Cloudflare.
- Demonstrated ownership of cloud security architecture, IAM, and secrets management.
- Hands-on depth with OIDC, workload identity federation, IAM design, and secret managers.
- Experience rotating production database or API credentials without causing outages.
- Experience writing cloud detections, investigating real incidents, and using cloud audit logs.
- Comfort with Terraform or a similar infrastructure-as-code tool and at least one automation language such as Python, Go, or TypeScript.
- Experience securing CI/CD and build pipelines, including GitHub Actions and deployment credentials.
- Hands-on experience using AI tooling for building, scripting, and security investigations.
- Bonus: experience securing Vercel, AI agent runtimes, sandboxed code execution, Kubernetes, Postgres, Databricks, or data platforms.
- Bonus: cloud incident response, SOC 2 or ISO 27001 compliance evidence work, early startup security hiring, or data protection requirements for logs and access controls.
Benefits
- Competitive compensation aligned to the markets where team members are based, with role-specific ranges listed on the posting.
- Comprehensive medical, dental, vision, and additional health and wellness support programs.
- Opportunity to work on cutting-edge AI with a small, mission-driven team.
- Transparency-, trust-, and community-oriented culture.
- Onsite role in the San Francisco office.
Tech Stack
AWSCloudflareDatabricksGitHub ActionsGoGoogle Cloud PlatformKubernetesPostgreSQLPythonTerraformTypeScriptVercel
Categories
About Arena Intelligence, Inc.
Created by researchers from UC Berkeley, Arena (formerly LMArena) is a community-powered platform to measure and advance the frontier of AI for real-world use. Tens of millions of builders, researchers, and creative professionals come to Arena to use frontier models and give feedback on their responses, shaping a public leaderboard grounded in real-world use.