Note: The job is a remote job and is open to candidates in USA. ServiceTitan is seeking an experienced Staff Cloud Security Engineer to strengthen the security foundation of its modern cloud environments and next-generation applications. The role focuses on automated security controls, multi-cloud infrastructure hardening, DevSecOps, identity and access management, workload security, data protection, and cloud threat detection and response.
Responsibilities
- Integrate robust security controls directly into CI/CD platforms such as GitHub, GitLab, Jenkins, or Azure DevOps
- Evaluate and implement pipeline-based security Infrastructure as Code (IaC) scanning. Manage and configure IaC scanning tools to surface true risk
- Build and optimize developer feedback loops and automated remediation workflows to ensure software is secure by default. Develop automated scripts using Python, Bash, or PowerShell to streamline security processes
- Build and maintain IAM security controls across cloud platforms, assessing policies to enforce the principle of least privilege
- Standardize management, security controls, and lifecycle expectations with regard to non-human identity
- Govern the secure use of cloud identities, Application Programming Interfaces (APIs), and secrets management
- Develop and implement secure infrastructure baselines, vulnerability management processes, and hardening standards across AWS, Azure, or GCP environments
- Validate security configurations and leverage IaC tools like Terraform, CloudFormation, or Bicep to ensure repeatable, auditable, and secure infrastructure provisioning
- Tackle high-impact infrastructure projects such as multi-cloud network isolation, secure multi-tenant use, and continuous remediation of discovered misconfigurations
- Guide engineering teams on secure architecture design for cloud apps, microservices, serverless services, and PaaS workloads
- Advance container and Kubernetes security by implementing runtime controls, supply-chain security, and configuration assessments
- Secure in-house and public AI/ML systems against cyber threats, adversarial attacks, and unauthorized access, ensuring models and data pipelines are protected throughout the solution lifecycle
- Ensure that sensitive cloud and AI data is properly encrypted, anonymized, and securely stored
- Assess and implement strong encryption configurations, checkpoint encryption, and tokenization to protect data at rest and in transit
- Develop and enforce policies to align data security and privacy measures with industry regulations, ethical standards, and organizational governance requirements
- Partner with Security Operations to improve cloud application telemetry, logging, and observability. Help expand monitoring capabilities by onboarding log sources and building detection rules for cloud-based threats
- Monitor and analyze security events using SIEM, Cloud Security Posture Management (CSPM), and Cloud Workload Protection Platforms (CWPP)
- Support the triage, investigation, and forensic analysis of cloud-based application or pipeline security incidents, working collaboratively to contain and mitigate threats
Skills
- 7-10+ years of hands-on experience in cloud security, application security, DevSecOps, or related engineering roles
- Deep hands-on experience with Azure and/or AWS security services, including the design and maintenance of multi-cloud application controls
- Proficiency in scripting (Python, Bash, PowerShell) to automate security tasks
- Strong understanding of container security (Docker, Kubernetes) and IaC security (Terraform, ARM)
- Industry certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, GCSA, or OSCP are highly preferred
Benefits
- Flexible time off with ample learning and development opportunities
- A comprehensive onboarding program
- Leadership training for Titans at all levels
- Other learning and development programs and events
- Bonusly rewards
- Peer-nominated awards
- Company-paid medical, dental, and vision coverage, with 100% employer-paid options and 90% coverage for dependents
- FSA and HSA
- 401k match
- Telehealth options, including memberships to One Medical
- Parental leave and support
- Up to $20k in fertility services, including IUI and IVF
- Surrogacy reimbursement
- Adoption reimbursement
- On-demand maternity support through Maven Maternity
- Free breast milk shipping through Maven Milk
- Pet insurance
- Legal advisory services
- Financial planning tools
- Annual bonus
- Equity
Company Overview
Company H1B Sponsorship