Member of Technical Staff (Cloud Security Engineer)

perplexity; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Perplexity is seeking a highly experienced Cloud Security Engineer to join our security team in San Francisco, CA. You will lead efforts to build secure, scalable cloud infrastructure that enables engineers to innovate quickly and safely.

Responsibilities include embedding security into development workflows, deploying guardrails with Terraform, and using AWS GuardDuty, Security Hub, and AWS Config to detect threats and ensure compliance across SOC 2 Type II and ISO 27001.

Qualifications

• 8+ years of experience in cloud infrastructure or platform engineering.
• Proven track record building scalable, secure cloud platforms.
• Strong programming skills in Python or Go.

Responsibilities

• Embed security into development workflows and promote secure-by-default patterns.
• Build Terraform modules with built-in security guardrails.
• Deploy detections using AWS GuardDuty and Security Hub to identify threats.
• Maintain SOC 2 Type II and ISO 27001 compliance through automated evidence collection.
• Audit cloud configurations with AWS Config and OPA; remediate deviations from CIS benchmarks.
• Secure CI/CD and supply chain pipelines with artifact signing and secret scanning.
• Enforce zero-trust networking across cloud environments and participate in on-call rotation.

Skills

Cloud infrastructure

Security in dev workflows

Terraform proficiency

Python/Go

Multi-cloud (bonus)

Tools

AWS GuardDuty

AWS Security Hub

AWS Config

Open Policy Agent

Terraform

Job description

Perplexity is seeking a highly experienced and hands-on Cloud Security Engineer to join our dynamic security team, revolutionizing the way people search and interact with the internet. In this role, you'll lead efforts to build and maintain secure, scalable infrastructure that empowers engineers to innovate quickly and safely.

Responsibilities

• Partner with infrastructure and engineering teams to embed security into development workflows and promote secure-by-default patterns
• Build Terraform modules with built-in security guardrails, such as logging, encryption, and automated threat detection enablement
• Deploy cloud-native detection capabilities using AWS GuardDuty, Security Hub, and custom detection rules to identify credential compromise, crypto-mining, and lateral movement
• Maintain SOC 2 Type II and ISO 27001 compliance through automated collection of cloud control evidence
• Conduct security audits of cloud resource configurations using tools like AWS Config and Open Policy Agent, and remediate deviations from CIS Benchmarks and our internal security policies
• Secure CI/CD and supply chain pipelines by implementing controls such as artifact signing, secret scanning, and dependency monitoring
• Apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments
• Participate in the security on-call rotation and respond to security alerts and incidents to ensure rapid mitigation and root cause analysis

Qualifications

• 8+ years of experience in Cloud Infrastructure, Platform Engineering, or similar roles
• Proven track record of building and scaling infrastructure at high-growth technology companies
• Deep understanding of cloud-native architectures, microservices, and distributed systems
• Experience securing CI/CD pipelines, deployment automation, and internal tooling
• Strong programming skills in Python, Go, or similar languages
• Bonus: Experience with AI/ML infrastructure and multi-cloud environments