[Hiring] Senior Staff Cloud Security Engineer @Asapp

Role Description

We are looking for a full-time Sr. Staff Cloud Security Engineer to design, test, and strengthen the security of our complex, distributed, cloud-native microservices platform, which runs primarily on AWS. This is a high-impact, hands-on role. You’ll pair deep technical expertise with excellent communication to work alongside senior leaders, security engineers, and the broader engineering organization.

• Own cloud, application, and zero trust security architecture, including blueprints, guardrails, and secure design patterns for cloud-native microservices on AWS.
• Secure our AI and machine learning systems, including LLM-powered features, by threat modeling AI-specific risks and implementing practical mitigations.
• Build and scale detection engineering and monitoring pipelines across our cloud infrastructure and Kubernetes environments.
• Lead incident response: develop automated playbooks, run root-cause investigations on complex cloud security events, and test the team through regular tabletop exercises.
• Secure the SDLC, including CI/CD automation, container security, vulnerability management, design reviews, and internal testing of new services and enhancements.
• Perform threat modeling and architecture reviews on complex distributed systems and data flows.
• Support the customer security team by explaining our security controls directly to customers during technical deep-dives.

Qualifications

• 8+ years of experience in cloud security, application security, and security architecture in modern distributed environments.
• Hands-on Kubernetes security experience.
• Hands-on security testing of cloud-native stacks.
• Familiarity with the latest AI threats and mitigation techniques.
• Deep technical skills: ability to move from architecture diagrams to code, config, and logs.
• Excellent communication skills, including with customers.
• Proven success in a high-growth startup environment.

Requirements

• Experience building detection engineering and SIEM/SOAR pipelines, analyzing logs at scale using AI, and leading real incident response and threat hunting.
• Experience securing, monitoring, and investigating incidents in production Kubernetes and containerized environments.
• Experience securing and testing modern application architectures (microservices, APIs, containers) in the cloud, with deep AWS experience.
• Ability to explain complex security concepts and our under-the-hood controls to customer security teams, executives, and engineers alike.
• Adaptability, autonomy, and rapid execution in a startup pace environment.

Benefits

• Competitive compensation
• Stock options
• Healthcare for the family group
• Mac equipment
• USD 150 per month in flexible benefits
• 3 weeks of vacation
• English lessons

Company Description

ASAPP is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, or veteran status.