Senior Cloud Security Engineer
Summary
This role involves owning the security of a large-scale data platform on GCP and Kubernetes, building guardrails, automation, and controls. Responsibilities include managing cloud security posture, implementing secure foundations, integrating security into CI/CD, and leading incident response, utilizing AI for security tasks.
SUMMARY:
We’re looking for a Senior Cloud Security Engineer to own the security of a large-scale data platform that processes billions of events for thousands of customers, where privacy is a core product commitment.
You’ll own cloud security end to end, building the guardrails, automation and controls that make the secure path the default for every engineer. You’ll work closely with the infrastructure team who own the platform, and see your decisions go straight to production.
RESPONSIBILITIES:
- Own the security posture of our GCP and Kubernetes environments: IAM, network segmentation, workload hardening, and data access to BigQuery, Bigtable and other data stores, detecting and fixing cloud misconfigurations continuously and automating remediation wherever possible
- Build secure-by-default foundations: hardened base images, secure Kubernetes configurations, and policy-as-code guardrails for Kubernetes and Terraform
- Partner with engineering to embed security into CI/CD, with automated fixes and alerts instead of manual checklists
- Own secrets and key management end to end, including rollout, rotation and access policy
- Drive vulnerability management from discovery to fix, prioritizing by real exposure
- Review new services and designs with practical, lightweight threat modeling
- Lead security incidents from containment to post-mortem
- Serve as the go-to security expert across R&D, mentoring engineers and helping teams adopt AI services safely
REQUIREMENTS:
- 6+ years in security, infrastructure, DevOps, or SRE, including 3+ years owning cloud security in production
- Deep hands-on experience securing a major public cloud. We run on GCP; strong AWS or Azure engineers ramp quickly here.
- Production Kubernetes security: RBAC, network policies, admission control, workload hardening
- Terraform (or similar) plus Python or Go. You’ve built security automation, not just configured off-the-shelf tools.
- Sound judgment on risk: you know when to block, when to guide, and when to accept
AI FLUENCY & ENGINEERING EXCELLENCE:
- Uses AI to scale security work in practice, e.g. LLM-assisted triage, generating and testing policy-as-code, or automating design reviews
- Familiar with the security risks of LLM APIs and AI services in production, or eager to build that expertise
NICE TO HAVE:
- Application security or DevSecOps experience
- Experience securing data platforms and enforcing data access governance
- A background in DevOps, SRE or Platform engineering before moving into security
WHY JOIN PLACER.AI?
- Join a rocketship! We are pioneers of a new market that we are creating
- Take a central and critical role at Placer.ai
- Work with, and learn from, top-notch talent
- Competitive salary
- Excellent benefits
- Hybrid
NOTEWORTHY LINKS TO LEARN MORE ABOUT PLACER
- Placer.ai's $100M round C funding (unicorn valuation!)
- See our data in action at The Anchor
- Placer.ai in the news
- Video: About Placer for Commercial Real Estate
- Video Playlist: Placer Brand & Explainer Videos
Placer.ai is committed to maintaining a drug-free workplace and promoting a safe, healthy working environment for all employees.
Placer.ai is an equal opportunity employer and has a global remote workforce. Placer.ai's applicants are considered solely based on their qualifications, without regard to an applicant's disability or need for accommodation. Any Placer.ai applicant who requires reasonable accommodations during the application process should contact Placer.ai's Human Resources Department to make the need for an accommodation known.