1 month ago
Base Salary
$147k - $255k/yr
Responsibilities
- Set and evolve cloud security architecture and guardrails across AWS and GCP, including account and project configuration, network security, and infrastructure standards.
- Strengthen identity and access management using least privilege, just-in-time access, short-lived credentials, and secure cross-account access.
- Define secrets management, data protection, and encryption standards.
- Secure Kubernetes workloads, base images, workload identity, runtime protection, service isolation, registries, and cloud deployment paths.
- Build reusable Terraform modules and policy-as-code guardrails that make secure configurations the default.
- Improve cloud telemetry and detection coverage, conduct threat hunting and attack-path analysis, and support incident containment and recovery architecture.
- Drive the Cloud Security roadmap, lead cross-team technical initiatives, establish standards, mentor engineers, and communicate risks and progress to stakeholders.
Requirements
- 10+ years of experience in cloud or infrastructure security engineering, or an equivalent blend of software and security engineering, with hands-on experience securing production cloud environments at scale.
- Deep expertise in AWS or GCP and sufficient fluency in the other cloud provider to assess security risks.
- Experience shaping security architecture and leading cross-team initiatives through influence without formal authority.
- Deep hands-on IAM experience, including least privilege, cross-account access, short-lived workload credentials, OIDC federation, service-to-service identity, mTLS, SPIFFE/SPIRE, or service mesh identity models.
- Experience securing Kubernetes and containerized workloads, including runtime protection and workload isolation.
- Experience with CSPM/CNAPP platforms, security findings, attack-path analysis, and prioritized remediation.
- Experience designing cloud security baselines, policy-as-code guardrails, secure infrastructure provisioning, and landing-zone automation.
- Strong infrastructure-as-code and automation skills using Terraform or equivalent tools and a programming language such as Python or Go.
- Experience with cloud-native security tooling, SIEM integration, detection capabilities, and applying incident learnings to preventive and detective controls.
- Demonstrated ability to deliver measurable security improvements while balancing technical depth, architectural judgment, and hands-on execution.
Benefits
- Scribd Flex flexible work model with occasional in-person attendance required; employees must reside in or near listed cities in the United States, Canada, or Mexico.
- Comprehensive health, dental, and vision coverage, plus mental health support and disability coverage.
- Generous paid time off, including vacation, sick time, holidays, winter break, volunteer time, and sabbaticals.
- Paid parental leave and family support benefits.
- Retirement matching, employee equity, learning and development programs, and professional growth opportunities.
- Wellness and home office stipends, complimentary access to Scribd products, and enterprise access to leading AI tools.
Categories
