Staff Cloud Security Engineer, Scribd
$147-255k
Salary dependent on location. Canada: $189,000 CAD - $225,000 CAD + Equity
E-book and audiobook subscription service
Be an early applicant
E-book and audiobook subscription service
201-500 employees
Be an early applicant
$147-255k
Salary dependent on location. Canada: $189,000 CAD - $225,000 CAD + Equity
201-500 employees
Company mission
To revolutionize the way the world reads and learns.
Role
Who you are
- 10+ years of experience with significant depth in cloud or infrastructure security engineering, or an equivalent blend of software and security engineering, with hands-on experience securing production cloud environments at scale. Deep expertise in at least one of AWS or GCP, with sufficient fluency in the other to reason about security risks
- Experience shaping security architecture and leading initiatives across team boundaries, including influencing engineering teams to adopt security standards and controls without formal authority
- Deep hands-on identity and access management expertise, including least-privilege access, cross-account access patterns, short-lived workload credentials (e.g., IRSA, OIDC federation), and service-to-service identity and authorization (e.g., mTLS, SPIFFE/SPIRE, or service mesh identity models), with experience reducing standing access and long-lived credentials
- Experience securing cloud workloads, including Kubernetes, container security, runtime protection, and workload isolation
- Experience with cloud security posture management and workload protection, including CSPM/CNAPP platforms, evaluating security findings, identifying attack paths, and translating them into prioritized improvements
- Experience designing and implementing cloud security guardrails at scale, including account or project security baselines, policy-as-code (e.g., AWS SCPs or OPA), secure infrastructure provisioning, and landing zone automation
- Strong Infrastructure-as-Code and automation skills, including Terraform or equivalent tooling and proficiency in a programming language such as Python or Go
- Experience with cloud security visibility and response, including cloud-native security tooling (e.g., GuardDuty, Security Command Center, CloudTrail, or Cloud Audit Logs), detection capabilities, SIEM integration, and applying incident learnings to improve preventive and detective controls
- A track record of delivering measurable security improvements, balancing technical depth, architectural judgment, and hands-on execution
What the job involves
- Our Security Engineering team protects Scribd's applications and cloud infrastructure. We take a proactive, shift-left approach, integrating security throughout the software development lifecycle, from development through production. We work closely with software engineers, infrastructure and platform teams, and product teams to identify and address security risks, build effective security controls, and enable engineering teams to move securely
- As a Staff Cloud Security Engineer, you'll help shape the technical direction of Cloud Security and drive complex architectural investments across our AWS and GCP environments. You'll work closely with engineers already building our cloud security capabilities to strengthen our identity model, establish secure-by-default guardrails, and protect the workloads our applications run on
- This is a hands-on technical leadership role. You'll lead significant initiatives, build security capabilities, and influence engineering teams to adopt them, balancing long-term architectural improvements with the most pressing security risks
- Set the Cloud Security architecture
- Strengthen and evolve security architecture and guardrails across our AWS and GCP environments, including account and project configuration, network security, and infrastructure standards
- Strengthen identity and access management across our cloud environments, driving least privilege, just-in-time access, short-lived workload credentials, and secure cross-account access
- Define and improve secrets management, data protection, and encryption standards, ensuring security controls are effective and their coverage can be demonstrated
- Secure cloud workloads and delivery paths
- Drive security architecture and guardrails for cloud workloads, including Kubernetes, secure base images, workload identity, runtime protection, and isolation of services processing untrusted content, with an emphasis on limiting the impact of compromise
- Partner with our Infrastructure teams to secure cloud deployment paths, workload identities, registries, and the infrastructure supporting CI/CD
- Build reusable security capabilities and paved paths, including Terraform modules and policy-as-code guardrails, that make secure configurations the default and prevent noncompliant infrastructure changes before deployment
- Strengthen cloud visibility and resilience
- Define cloud telemetry requirements and improve detection coverage for cloud-native threats in partnership with Detection & Response
- Validate cloud security controls through threat hunting and attack-path analysis, contribute technical expertise during incidents, and partner with infrastructure teams on containment and recovery architecture, translating incident learnings into durable improvements
- Drive Cloud Security strategy and technical direction
- Shape and drive the Cloud Security technical roadmap alongside the Security Engineering manager and engineers in the domain, using threat models, incidents, and control effectiveness to prioritize systemic risks while balancing security outcomes with engineering friction
- Lead complex technical initiatives, establish and evolve security standards, and influence their adoption across engineering teams
- Provide technical guidance and mentorship, contribute to tooling evaluations, and proactively communicate Cloud Security risks, progress, and direction to stakeholders
Our take
The world's biggest site for social reading and publishing, Scribd's website has over 250 million unique visitors each month and a vast content library, consisting of over 200 million audiobooks, magazines, ebooks and newspapers as well as media created by the Scribd community.
While Scribd is the largest social reading site, it is not alone in offering this kind of media. It competes against some major players, the largest of which are Amazon's Kindle and Audible offerings, but also includes the likes of BookMate and the non-profit Internet Archive. Where it stands aside is in its feature-rich reader and the sheer diversity of its library, which, thanks to partnerships with several major publishers, features numerous popular titles as well as a range of independent creators.
Further differentiating it from competitors, the company taken a firm stand on social issues, in particular the recent wave of book bannings taking place across the United States. By making the banned titles freely available it hopes to do its part in preserving literary freedom. With this tendency showing no signs of slowing down, Scribd's intervention in this area could prove to be important.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
0% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Nov 2019
$58m
LATE VC
Jan 2015
$22m
LATE VC
Total funding: $105.9m
Company benefits
- Healthcare Insurance Coverage (Medical/Dental/Vision): 100% paid for employees
- 12 weeks paid parental leave
- Short-term/long-term disability plans
- 401k/RSP matching
- Tuition Reimbursement
- Learning & Development programs
- Quarterly stipend for Wellness, Connectivity & Comfort
- Mental Health support & resources
- Free subscription to Scribd + gift memberships for friends & family
- Referral Bonuses
- Book Benefit
- Sabbaticals
- Company wide events
- Team engagement budgets
- Vacation & Personal Days
- Paid Holidays (+ winter break)
- Flexible Sick Time
- Volunteer Day
- Company-wide Diversity, Equity, & Inclusion programs
Company HQ
China Basin, San Francisco, CA
Leadership
Tony Grimminck
(CEO)Joined the company in 2019 as CFO, becoming CEO in 2023. Previously co-founded International Connector, has served as Board Member and Advisor at various companies, and was CFO at Oto Analytics.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 10 more jobs at Scribd