← All roles

Staff Security Engineer, Cloud

ALSO· Software Engineering
Apply on company site
Palo Alto$205k - $240kFull-timePosted 2mo ago

About the role

We’re ALSO, an electric mobility company, seeking a Staff Security Engineer for Cloud to own security end to end for a connected, software-defined EV platform. Build security architecture and implementation in Go alongside the backend team, handling threat modeling, Kubernetes security, and cloud security across AWS and microservices.

Responsibilities

  • Own cloud security end to end — strategy, architecture, implementation, and operations across AWS, Kubernetes, and microservices platform; perform threat modeling for new systems in architecture reviews before code exists
  • Design and implement identity and access at scale: workload identity, org-wide IAM, least privilege by default, secrets management, and certificate/key lifecycle, including mutual TLS between services and between cloud and vehicle
  • Harden containers and orchestration: image provenance, admission control, runtime and network policy, service mesh configuration, and clean isolation across microservices
  • Secure the software supply chain: SBOM generation, dependency and image scanning, signed artifacts, and CI/CD pipelines that fail closed on what matters
  • Build the controls in Go — authorization services, policy enforcement, provisioning and rotation tooling — and serve as the DevSecOps function with guardrails and policy as code
  • Run detection and response: security logging and telemetry, meaningful alerting, runbooks, on-call for security incidents, blameless postmortems with real fixes
  • Secure the vehicle-to-cloud boundary: device identity and provisioning, fleet-wide certificate rotation, secure OTA update paths, anomaly and tamper detection at scale
  • Contribute to core backend work alongside the team, and own assurance — penetration tests, vulnerability management, evidence collection, and proportionate standards work

Qualifications

  • 10+ years in backend and infrastructure engineering, with substantial production security ownership
  • Expert, hands-on AWS experience: IAM, VPC, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config, SCPs, plus core compute/data services (EKS, ECS, ECR, Lambda, DynamoDB, S3)
  • Deep Kubernetes and container security experience including RBAC, admission controllers, pod security standards, network policy, secrets handling, runtime detection, image hardening
  • Proficiency in Go with production-grade coding and delivery
  • Experience securing microservices and distributed systems: service-to-service auth, API gateway patterns, rate limiting, tenant isolation, event-driven pipelines security
  • Identity protocols and applied cryptography: OAuth2, OIDC, JWT, SAML, mutual TLS, PKI with large-scale certificate lifecycle management
  • Infrastructure and policy as code with security gating in CI/CD
  • Threat modeling and secure architecture reviews; incident response leadership from detection to postmortem
  • Demonstrated ownership of security programs from 0 to 1 without a large existing team

Skills

Required:Cloud security architectureTrust and security engineering in GoThreat modelingIdentity and access managementSecurity in CI/CD and policy as codeContainer and Kubernetes securityIncident response and forensics

Benefits

  • Robust health coverage — health, dental, vision insurance covered up to 100% with FSA & HSA options
  • One Medical membership and dedicated insurance advocates
  • Rich fertility and family building benefits with Progyny
  • Flexible time off
  • 401(k) match
Last updated Aug 19, 2026. Interested? Apply on the company site.
ALSO logo

About ALSO

Introducing Transcendent Mobility

Move beyond.

MobilityElectric BikesTransportation
Company profileWebsite

More open roles at ALSO