Staff Cloud Security Engineer
ServiceTitan7 days ago
Base Salary
$168k - $270k/yr
Responsibilities
- Integrate security controls into CI/CD platforms and implement pipeline-based infrastructure-as-code scanning.
- Develop automated remediation workflows and scripts using Python, Bash, and PowerShell.
- Build and maintain least-privilege IAM controls, non-human identity standards, and secrets-management practices across cloud platforms.
- Establish secure infrastructure baselines, vulnerability-management processes, hardening standards, and multi-cloud network isolation.
- Validate Terraform, CloudFormation, Bicep, and ARM security configurations for repeatable and auditable provisioning.
- Guide secure architecture for cloud applications, microservices, serverless services, PaaS workloads, containers, Kubernetes, and AI/ML systems.
- Implement data encryption, anonymization, secure storage, checkpoint encryption, tokenization, and privacy governance.
- Improve cloud telemetry, logging, observability, monitoring, detection rules, and onboarding of security log sources.
- Support triage, investigation, forensic analysis, containment, and mitigation of cloud and pipeline security incidents.
- Collaborate with engineering, DevOps, product, and Security Operations teams to deliver scalable secure solutions.
Requirements
- 7-10+ years of hands-on experience in cloud security, application security, DevSecOps, or related engineering roles.
- Deep hands-on experience with Azure and/or AWS security services and multi-cloud application controls.
- Proficiency with Python, Bash, and PowerShell scripting for security automation.
- Strong understanding of Docker and Kubernetes container security and Terraform and ARM infrastructure-as-code security.
- Preferred certifications include CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, GCSA, or OSCP.
- Ability to collaborate across engineering, DevOps, product, and security teams and explain complex security concepts to technical and non-technical stakeholders.
Benefits
- Flexible time off, flextime, autonomous-work support, learning and development opportunities, comprehensive onboarding, leadership training, Bonusly, and peer-nominated awards.
- Company-paid medical, dental, and vision coverage, including fully employer-paid options and 90% dependent coverage, plus FSA, HSA, 401(k) match, and One Medical telehealth memberships.
- Parental leave, up to $20,000 in fertility services, surrogacy and adoption reimbursement, Maven Maternity support, Maven Milk breast-milk shipping, pet insurance, legal advisory services, and financial planning tools.
Tech Stack
Categories
About ServiceTitan
We’re building the operating system for the trades, a critical industry that’s been underserved by technology for far too long. Founded by the sons of hard working tradespeople and backed by top investors, our platform delivers a seamlessly integrated experience that enables thousands of business owners to accelerate growth, drive operational efficiencies and deliver a superior customer experience. We currently serve over ten trades industries, and we’re just getting started. Joining our team means that you’ll have the opportunity to make an outsized impact on the trades ecosystem and world at large. Are you built for the challenge?