Staff Cloud Security Engineer

Job description

About Typeface We he lp the world’s biggest brands move from brief to fully personalized campaigns — in days, not months. Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona and Menlo, we’re building category-defining technology at the intersection of creativity and AI with real impact. Join us to help shape the future of enterprise marketing. What You’ll Do We’re looking for a Staff Cloud Security Engineer to help lead the security of our cloud platform. You’ll design, build, and operate the controls that protect our infrastructure end to end — so the enterprise marketers who rely on Typeface can move fast with confidence that their brands, content, and data are safe. This is your chance to shape how a fast-growing AI company secures the cloud — not just by finding risks, but by building secure-by-default systems, guardrails, and automation that let every team ship faster and safer. How You’ll Make an Impact: • Lead the design and implementation of security architecture across our cloud environments – from identity and networking to data protection and workload security • Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks • Own identity and access management, applying least-privilege principles across accounts, services, and users • Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy • Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution • Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001 • Partner with incident response to investigate and remediate cloud security events • Mentor and support teammates, helping to shape a strong, security-first engineering culture What You Bring: • 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale • Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience • Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services • Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes) • Strong understanding of IAM, network security