Senior Cloud Security Engineer, ServiceTitan
$137.9-184.5k
+ Annual bonus & equity
All-in-one operating platform for trades
Be an early applicant
All-in-one operating platform for trades
1001+ employees
Be an early applicant
$137.9-184.5k
+ Annual bonus & equity
1001+ employees
Company mission
To be the world's most impactful vertical SaaS company.
Role
Who you are
- Experience: 5+ years of hands-on experience in cloud security, application security, DevSecOps, or related engineering roles
- Cloud Expertise: Deep hands-on experience with Azure and/or AWS security services, including the design and maintenance of multi-cloud application controls
- Technical Skills: Proficiency in scripting (Python, Bash, PowerShell) to automate security tasks. Strong understanding of container security (Docker, Kubernetes) and IaC security (Terraform, ARM)
- Certifications: Industry certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, GCSA, or OSCP are highly preferred
- Being human isn’t about checking every box on a list. It’s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway
What the job involves
- We are seeking an experienced Cloud Security Engineer to shape the security foundation of our modern cloud environments and next-generation applications
- In this high-impact role, you will design cutting-edge automated security controls, harden multi-cloud infrastructure, and champion secure development practices across the organization
- If you are passionate about cloud security, DevSecOps, and staying ahead of emerging threats, this role puts you right at the center of innovation
- Pipeline Integration: Integrate robust security controls directly into CI/CD platforms such as GitHub, GitLab, Jenkins, or Azure DevOps
- Automated Scanning: Evaluate and implement pipeline-based security Infrastructure as Code (IaC) scanning. Manage and configure IaC scanning tools to surface true risk
- Developer Feedback Loops: Build and optimize developer feedback loops and automated remediation workflows to ensure software is secure by default. Develop automated scripts using Python, Bash, or PowerShell to streamline security processes
- Cloud Identity Controls: Build and maintain IAM security controls across cloud platforms, assessing policies to enforce the principle of least privilege
- Non-Human Identity Management: Standardize management, security controls, and lifecycle expectations with regard to non-human identity
- Secrets Management: Govern the secure use of cloud identities, Application Programming Interfaces (APIs), and secrets management
- Cloud Posture: Develop and implement secure infrastructure baselines, vulnerability management processes, and hardening standards across AWS, Azure, or GCP environments
- Infrastructure as Code (IaC): Validate security configurations and leverage IaC tools like Terraform, CloudFormation, or Bicep to ensure repeatable, auditable, and secure infrastructure provisioning
- Network Security: Tackle high-impact infrastructure projects such as multi-cloud network isolation, secure multi-tenant use, and continuous remediation of discovered misconfigurations
- Cloud-Native Architectures: Guide engineering teams on secure architecture design for cloud apps, microservices, serverless services, and PaaS workloads
- Container Security: Advance container and Kubernetes security by implementing runtime controls, supply-chain security, and configuration assessments
- AI & Emerging Tech: Secure in-house and public AI/ML systems against cyber threats, adversarial attacks, and unauthorized access, ensuring models and data pipelines are protected throughout the solution lifecycle
- Data Protection: Ensure that sensitive cloud and AI data is properly encrypted, anonymized, and securely stored
- Encryption Standards: Assess and implement strong encryption configurations, checkpoint encryption, and tokenization to protect data at rest and in transit
- Compliance Alignment: Develop and enforce policies to align data security and privacy measures with industry regulations, ethical standards, and organizational governance requirements
- Telemetry & Visibility: Partner with Security Operations to improve cloud application telemetry, logging, and observability. Help expand monitoring capabilities by onboarding log sources and building detection rules for cloud-based threats
- Threat Detection: Monitor and analyze security events using SIEM, Cloud Security Posture Management (CSPM), and Cloud Workload Protection Platforms (CWPP)
- Incident Response: Support the triage, investigation, and forensic analysis of cloud-based application or pipeline security incidents, working collaboratively to contain and mitigate threats
Our take
In the US, there's been a booming demand for home-service businesses, yet historically many of these trades were running with outdated software systems. That's where ServiceTitan comes in. Founded by friends who grew up around the trades, the company saw a clear gap and set out to give contractors the modern platform they desperately needed.
ServiceTitan's platform is designed specifically for the trades and brings together everything a contractor might need, in one handy system. By focusing on what trade-business owners actually need, it helps turn chaos into structure, giving visibility into operations, so owners can ultimately run their business better.
Now, ServiceTitan serves more than 11,800 trade customers and reported more than $10,000 in annualized billings and processes a huge volume of jobs on its platform. With a market that's still under-served by technology and a platform built to scale, the company is ready to grow even further.
Steph
Company Specialist at Welcome to the Jungle
Insights
18% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Nov 2022
$365m
SERIES H
Jul 2021
$200m
SERIES G
Total funding: $1.5bn
Company benefits
- Flexible time off
- Fully paid individual medical, dental, and vision coverage
- Access to on-demand services like Ginger, Headspace, One Medical, Galileo, Aaptiv, and more
- Tax free savings via HSA, FSA, and Dependent Care FSA
- 401(k) match
- Personal development programs
- Medical plan with up to $20,000 in fertility coverage
- Up to 30 weeks of paid leave for birthing parents and up to 16 for non-birthing parents
- Adoption support including reimbursement of up to $20,000
- Bereavement leave for loss of a pregnancy or loved one
- Access to programs for new parents including Maven Maternity, Ready, Set, Food! Wellthy, SNOO Smart Sleeper, and more
Company HQ
Downtown, Glendale, CA
Leadership
Ara Mahdessian
(Co-Founder & CEO)They studied Management and Computer Science at Stanford University, before co-founding ServiceTitan with Vahe in January 2013. They have served since then as CEO.
Vahe Kuzoyan
(Co-Founder & President)Having studied Computer Science at the University of Southern California, they co-founded ServiceTitan in January 2013, serving as the president since.
Share this job
View 51 more jobs at ServiceTitan