Staff Security Engineer, Cloud

The role

This person will own cloud security end to end by designing and building security architecture, implementation, and operations. They will work in Go across AWS, Kubernetes, and microservices to secure the vehicle-to-cloud boundary and software supply chain.

What you will do

• Own cloud security strategy, architecture, implementation, and operations across AWS, Kubernetes, and microservices
• Design and implement identity and access at scale
• Harden containers and orchestration
• Secure the software supply chain
• Build controls in Go including authorization services and policy enforcement
• Run detection and response including security logging, alerting, and on-call
• Secure the vehicle-to-cloud boundary
• Contribute to core backend work and own assurance tasks

Required qualifications

• 10+ years in backend and infrastructure engineering with a substantial portion spent owning security in production
• Expert, hands-on AWS: IAM, VPC and network design, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config, and org-level guardrails (SCPs), alongside core compute and data services (EKS, EC
• Deep Kubernetes and container security including RBAC, admission controllers, pod security standards, network policy, secrets handling, runtime detection, and image hardening
• Fast, fluent Go
• Microservices and distributed systems security
• Identity protocols and applied cryptography in practice: OAuth2, OIDC, JWT, SAML, mutual TLS, and PKI
• Infrastructure and policy as code
• Threat modeling and secure architecture review
• Demonstrated 0 to 1 ownership

Benefits

• Health, dental and vision insurance covered up to 100% by ALSO
• FSA & HSA options
• One Medical membership
• Dedicated insurance advocates
• Fertility and family building benefits with Progyny
• Flexible time off
• 401(k) match

About the company

ALSO is an electric mobility company focused on creating vertically integrated, small EVs. They are located in the heart of Silicon Valley.