2 days ago
Base Salary
$143k - $209k/yr
Responsibilities
- Design and implement scalable security controls and systems for cloud infrastructure across a global environment.
- Establish, enforce, and improve cloud security baselines, guardrails, and secure-by-default deployment practices.
- Develop policy-as-code, infrastructure-as-code, automation, reusable modules, and templates for security operations and compliance.
- Integrate security checks and guardrails into CI/CD pipelines and development workflows.
- Respond to cloud security incidents, conduct post-mortems, drive remediation, and harden platforms.
- Harden cloud resources, images, registries, and workloads while reducing configuration drift and verifying remediation.
- Operate and optimize third-party cloud security platforms and align them with service level objectives.
- Create documentation, runbooks, self-service resources, and security metrics for engineering and platform teams.
Requirements
- 5+ years of experience in cloud security engineering or a related field.
- Bachelor’s degree in Computer Science, Engineering, or a related discipline.
- Experience with Python, Go, or TypeScript.
- Experience with OPA, Sentinel, Conftest, Terraform, CloudFormation, or CDK for policy-as-code and infrastructure-as-code.
- Experience integrating security controls into CI/CD pipelines and working in multi-cloud environments.
- Experience with Kubernetes, container security, cloud incident response, root cause analysis, monitoring, alerting, and service level objectives.
- Experience with cloud security posture management tools, image and registry hardening, workload and runtime controls, technical documentation, and runbooks.
- Preferred qualifications include a master’s degree, deep Azure security experience, Wiz or Microsoft Defender knowledge, AWS or GCP security controls, serverless and cloud-native application security, SOC 2, ISO 27001 or PCI DSS compliance, automated remediation, security orchestration, secrets management, and PKI.
Benefits
- Hybrid work arrangement requiring at least two days per week in an office, with the position unavailable in Alaska, Hawaii, Maine, Mississippi, North Dakota, South Dakota, Vermont, West Virginia, and Wyoming.
- Eligibility for a company bonus plan for non-sales roles, based on company performance.
- Paid time off and paid company holidays based on region.
- Up to six months of paid parental leave after birth, adoption, or foster care placement.
- Full health benefits from the first day of employment, including employer-paid and low-contribution plan options.
- Retirement and pension programs with potential employer contributions.
- Learning and development programs, coaching, online courses, and education reimbursements.
- Paid compassionate care leave.
Categories
About DocuSign
DocuSign builds e-signature, contract lifecycle management, and agreement workflow software used by businesses to prepare, sign, and manage contracts. It sells cloud-based subscriptions and APIs that integrate with systems like Salesforce, Microsoft, and Google to automate document workflows and compliance. Founded in 2003 and headquartered in San Francisco, DocuSign is a public company on NASDAQ with over 1.5 million customers in more than 180 countries.