3 months ago
Base Salary
$205k - $240k/yr
Responsibilities
- Own cloud security strategy, architecture, implementation, and operations across AWS, Kubernetes, and the microservices platform.
- Design and implement workload identity, IAM, least privilege, secrets management, certificate and key lifecycle management, and mutual TLS.
- Harden containers and orchestration through image provenance, admission control, runtime and network policy, service mesh configuration, and microservice isolation.
- Secure the software supply chain with SBOM generation, dependency and image scanning, signed artifacts, and CI/CD security gates.
- Build authorization services, policy enforcement, provisioning, and rotation tooling in Go, and serve as the DevSecOps function through guardrails and policy as code.
- Run security detection and response, including logging, telemetry, alerting, runbooks, security incident on-call, and postmortems.
- Secure the vehicle-to-cloud boundary through device identity, provisioning, certificate rotation, OTA update security, and anomaly and tamper detection.
- Contribute to backend engineering and own penetration testing, vulnerability management, evidence collection, and standards work.
Requirements
- 10+ years of backend and infrastructure engineering experience, with substantial production security ownership.
- Expert hands-on AWS experience, including IAM, VPC, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config, SCPs, EKS, ECS, ECR, Lambda, DynamoDB, and S3.
- Deep Kubernetes and container security experience, including RBAC, admission controllers, pod security standards, network policy, secrets handling, runtime detection, image hardening, and cluster operations.
- Fluent production Go development experience.
- Experience securing microservices and distributed systems, including service-to-service authentication and authorization, API gateways, rate limiting, tenant isolation, and event-driven pipelines.
- Practical experience with OAuth2, OIDC, JWT, SAML, mutual TLS, PKI, and certificate lifecycle management at scale.
- Experience with infrastructure as code, policy as code, and security gating in CI/CD.
- Demonstrated threat modeling, secure architecture review, and personally led incident response from detection through postmortem.
- Demonstrated 0-to-1 ownership of a security function or program without a large supporting team.
Benefits
- Health, dental, and vision insurance covered up to 100%, with FSA and HSA options.
- One Medical membership and dedicated insurance advocates.
- Fertility and family-building benefits through Progyny.
- Flexible time off.
- 401(k) match.
- Located in Silicon Valley; compensation ranges from $205,000 to $240,000 per year depending on experience, qualifications, and location.
Tech Stack
Categories
About ALSO
ALSO builds small, efficient electric vehicles for moving people and goods in dense urban settings, with options planned for both driver-operated and autonomous use. The privately held company, founded in 2025 and headquartered in Palo Alto, was originally incubated within Rivian and follows a vertically integrated approach spanning vehicle hardware, software, and sensing, selling directly through demos, retail experiences, and community activations.