Senior Cloud Security Engineer

SUMMARY:
We’re looking for a Senior Cloud Security Engineer to own the security of a large-scale data platform that processes billions of events for thousands of customers, where privacy is a core product commitment.
You’ll own cloud security end to end, building the guardrails, automation and controls that make the secure path the default for every engineer. You’ll work closely with the infrastructure team who own the platform, and see your decisions go straight to production.
RESPONSIBILITIES:
Define and own the cloud security roadmap, standards and tooling
Own the security posture of our GCP and Kubernetes environments: IAM, network segmentation, workload hardening, and data access to BigQuery, Bigtable and other data stores
Detect and fix cloud misconfigurations continuously, automating remediation wherever possible
Build secure-by-default foundations: hardened base images, secure Kubernetes configurations, and policy-as-code guardrails for Kubernetes and Terraform
Partner with engineering to embed security into CI/CD, with automated fixes and alerts instead of manual checklists
Own secrets and key management end to end, including rollout, rotation and access policy
Drive vulnerability management from discovery to fix, prioritizing by real exposure
Review new services and designs with practical, lightweight threat modeling
Lead security incidents from containment to post-mortem, and manage external penetration tests
Serve as the go-to security expert across R&D, mentoring engineers and helping teams adopt AI services safely
REQUIREMENTS:
8+ years of hands-on experience in security, infrastructure or DevOps engineering, including significant cloud security ownership in production
Deep hands-on experience securing a public cloud environment (GCP strongly preferred; AWS or Azure considered)
Production Kubernetes security experience: RBAC, network policies, admission control and workload hardening
Strong Terraform (or similar) and Python or Go skills, with a track record of building security automation beyond off-the-shelf tools
Sound judgment in prioritizing risk: knows when to block, when to guide and when to accept
AI FLUENCY & ENGINEERING EXCELLENCE:
* Uses AI to scale security work in practice, e.g. LLM-assisted triage, generating and testing policy-as-code, or automating design reviews
* Familiar with the security risks of LLM APIs and AI services in production, or eager to build that expertise
NICE TO HAVE:
Application security or DevSecOps experience
Experience securing data platforms and enforcing data access governance
A background in DevOps, SRE or Platform engineering before moving into security
WHY JOIN PLACER.AI?
Join a rocketship! We are pioneers of a new market that we are creating
Take a central and critical role at Placer.ai
Work with, and learn from, top-notch talent
Competitive salary
Excellent benefits
Hybrid
NOTEWORTHY LINKS TO LEARN MORE ABOUT PLACER
Placer.ai's $100M round C funding (unicorn valuation!)
See our data in action at The Anchor
Placer.ai in the news
Video: About Placer for Commercial Real Estate
Video Playlist: Placer Brand & Explainer Videos
Placer.ai is committed to maintaining a drug-free workplace and promoting a safe, healthy working environment for all employees.
Placer.ai is an equal opportunity employer and has a global remote workforce. Placer.ai's applicants are considered solely based on their qualifications, without regard to an applicant's disability or need for accommodation. Any Placer.ai applicant who requires reasonable accommodations during the application process should contact Placer.ai's Human Resources Department to make the need for an accommodation known.