Senior Cloud Security Engineer, Anyscale

• 8+ years in security engineering, with a deep focus on cloud and infrastructure security, ideally at a high-growth startup
• Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes)
• Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments
• Experience with CSPM and runtime security tooling, and the judgment to turn findings into prioritized, actioned work
• The ability to own cloud infrastructure security independently, set its direction, and make sound tradeoffs across teams
• Fluency working directly with engineers on architecture and remediation, not just producing findings

Desirable

• Anyscale's security needs are growing as we operate more production and cloud infrastructure for larger and more demanding customers
• We're looking for a Senior Cloud Security Engineer to own the security of that infrastructure
• This is a hands-on, high-ownership role: you will own how our production and cloud environments are hardened, isolated, and monitored
• You will set and drive the direction for infrastructure and production security, reporting to the Head of Security and partnering closely with the wider engineering organization
• In your first year, success looks like hardened and well-segmented production environments, strong runtime security coverage across our container footprint, and a clear, defensible story for how we secure the infrastructure our customers rely on
• Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation
• Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity
• Partner with engineering on secure infrastructure architecture and the secure design of our production environments
• Own cloud security posture management end to end: triage, prioritization, and driving remediation with the teams that own the resources
• Define and drive cloud infrastructure security standards: baseline configurations, infrastructure-as-code security, and key and secrets management
• Drive fine-grained, role-based access to production, in partnership with engineering and IT
• Feed infrastructure findings into vulnerability management and risk reporting