Staff Cloud Security Engineer

Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).

5+ years in cloud security or a related role.

Proven partnership with engineering teams, bringing security expertise to infrastructure access and security posture.

Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.

Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.

Strong opinions on the use of AI in different areas (assessments, threat models, penetration testing, etc).

A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages

Experience with secrets management at scale (e.g. HashiCorp Vault, AWS Secrets Manager) and payload encryption patterns such as codec servers for protecting sensitive workflow data.

Proficiency in Go; familiarity with Python. Go is Temporal's primary server and SDK language.

Strong command of gRPC security, mTLS, and service mesh architectures (Istio, Envoy).

Excellent communication and ability to explain complex security concepts to non-technical stakeholders.

Excellent collaboration and communication skills.

Prior experience with Temporal, Cadence, or similar workflow orchestration platforms and an understanding of workflow history, replay semantics, and scheduling internals.

FedRAMP, SOC 2 Type II, or ISO 27001 experience, particularly in the context of cloud-native SaaS.

Open Source automation or automation projects.

Expertise in other areas of security (AppSec, CorpSec, GRC)

Security conference talks or published research.