Staff Cloud Security Engineer

Typeface
Palo Alto, CA
HybridCareer-pivot friendly

Who this role is best for

A natural match if you have 10+ years in cloud security and experience with enterprise SaaS.

Best fit for

  • Candidates with 10+ years in cloud security and a track record of securing production environments at scale
    — “10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale”
  • Individuals with expertise in infrastructure as code and container security, especially in enterprise settings
    — “Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)”
  • Candidates who have worked on B2B or enterprise SaaS products and can enforce security guardrails
    — “Experience supporting B2B or enterprise SaaS products”

Things to consider

  • Requires 3 days per week in-office collaboration in Palo Alto, CA
    — “This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.”
  • Candidates must be prepared to work on complex AI systems and secure them effectively
    — “Bonus: Background securing AI or generative AI systems”

How to stand out

  • Highlight experience with secure-by-default systems and automation in your resume and interviews
    — “building secure-by-default systems, guardrails, and automation that let every team ship faster and safer”
  • Demonstrate your ability to enforce least-privilege IAM principles across enterprise environments
    — “Own identity and access management, applying least-privilege principles across accounts, services, and users”
  • Showcase your hands-on work with major cloud platforms like AWS, Azure, or GCP in your profile
    — “Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services”
  • Emphasize your ability to collaborate with cross-functional teams including Compliance and IT
    — “Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications”
  • Include examples of how you've monitored cloud security posture and resolved misconfigurations
    — “Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • secure cloud platform
  • successful security reviews
Typical background
10+ years of experience in cloud security

Skills & requirements

Required

Cloud_securityInfrastructure_engineeringAutomationCommunicationTeamwork

Preferred

Ai_securityGenerative_ai_experience

Stack & domain

Cloud SecurityInfrastructure EngineeringCloud PlatformsContainer SecurityCommunicationCollaborationProblem SolvingAWS Certified Security – SpecialtyCCSPCisspCloudSecurityAI

About the role

Original posting from Typeface via Greenhouse

About Typeface

We help the world’s biggest brands move from brief to fully personalized campaigns — in days, not months. 

Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona and Menlo, we’re building category-defining technology at the intersection of creativity and AI with real impact. Join us to help shape the future of enterprise marketing. 

What You’ll Do

We’re looking for a Staff Cloud Security Engineer to help lead the security of our cloud platform. You’ll design, build, and operate the controls that protect our infrastructure end to end — so the enterprise marketers who rely on Typeface can move fast with confidence that their brands, content, and data are safe.

This is your chance to shape how a fast-growing AI company secures the cloud — not just by finding risks, but by building secure-by-default systems, guardrails, and automation that let every team ship faster and safer.

How You’ll Make an Impact:

Lead the design and implementation of security architecture across our cloud environments – from identity and networking to data protection and workload security

Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks

Own identity and access management, applying least-privilege principles across accounts, services, and users

Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy

Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution

Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001

Partner with incident response to investigate and remediate cloud security events

Mentor and support teammates, helping to shape a strong, security-first engineering culture

What You Bring:

10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale

Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience

Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services

Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)

Strong understanding of IAM, network security, encryption, key management, and secrets management

Scripting or programming skills (Python, Go, or Bash) to automate security controls

Excellent communication skills and the ability to thrive independently and in collaborative teams

Experience supporting B2B or enterprise SaaS products

Bonus: Background securing AI or generative AI systems

Bonus: Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP

Location

This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.

Base Salary

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.

Benefits

Competitive compensation — including salary, equity, and 401(k)

Full medical, dental, and vision insurance for you and your family

HSA and FSA options to support your financial wellness

Flexible time off — including parental leave

Well-being programs — resources to support your mental and physical health

Daily lunch & snacks

Mentorship & impact — work closely with top AI leaders on products that ship 

Equality Opportunity Statement

We welcome and encourage applicants from all backgrounds. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, medical condition, veteran status, or any other legally protected status. We comply with applicable laws in every jurisdiction where we operate.

Why You’ll Love Working Here 

Build something big — Be part of a fast-growing startup defining a new category: marketing orchestration powered by Agentic AI.

Your work will matter — Trusted by Fortune 100 companies, our platform delivers 10x content velocity and 90% faster campaigns.

A+ team — Collaborate with veterans from Meta, Amazon, Adobe, Google, Microsoft, and top AI companies.

Backed by the best — GV, Salesforce Ventures, Microsoft, Lightspeed, Madrona and Menlo ($165M raised).

Recognized for innovation — TIME Best Inventions, Fast Company Next Big Thing in Tech, Gartner Cool Vendor, Adweek AI Company of the Year, LinkedIn Top Startup, Webby Award (AI Work & Productivity). 

Source: Typeface careers (Greenhouse)

Similar roles