Principal Product Security Engineer, Cloud Security

Jobgether; United States; Remote; USD 170,000 - 230,000; Full time

Benefits offered by this job

Remote work option

Health resources

Volunteer days

Global/international team

Job summary

Jobgether is seeking a senior Cloud Security Architect to lead the security strategy across AWS, GCP, and Azure. You will shape secure-by-default patterns, implement automated controls, and drive threat modeling for distributed microservices.

The role requires deep experience with multi-cloud, containers, and CSPM concepts. The ideal candidate will mentor engineers, influence executives, and guide architectural transformations, including monolith-to-microservices migrations and security-first

Qualifications

• Senior-level security architect experienced in cloud security across AWS/GCP/Azure.
• Led large-scale security architecture initiatives and threat modeling.
• Proficient in multi-cloud, containers, and IaC tooling.
• Strong programming skills in one or more modern languages.

Responsibilities

• Define and drive cloud security architecture across AWS, GCP, and Azure.
• Lead threat modeling and security assessments for complex systems.
• Design automated security controls and CI/CD security integrations.

Skills

Cloud security

Leadership

Multi-cloud architecture

Programming languages

IaC / policy-as-code

Zero Trust

Education

Bachelor's or Master's in CS/Info Security

Tools

Docker

Kubernetes

Service mesh

Terraform

Job description

Accountabilities:

• Define and drive the overall cloud security architecture across AWS, GCP, and Azure environments, establishing secure-by-default standards, architectural patterns, and scalable security guardrails.
• Lead advanced threat modeling exercises and in-depth security assessments across complex systems, distributed microservices, and highly regulated cloud environments.
• Design and implement automated security controls, detection mechanisms, and self-healing guardrails integrated into CI/CD pipelines and Infrastructure as Code (IaC).
• Establish the technical strategy for Cloud Security Posture Management (CSPM), continuous compliance, security baselines, and risk monitoring.
• Develop reusable security frameworks, engineering guidelines, and operational standards to improve security, resilience, and reliability across products and platforms.
• Provide technical leadership, mentorship, and guidance to security and software engineers, promoting security awareness and engineering best practices.
• Act as a principal technical advisor during high-severity security incidents, supporting root-cause investigations and defining long-term architectural remediation strategies.
• Collaborate with executive stakeholders, principal architects, and engineering leaders to translate complex security challenges into actionable strategic priorities.
• Lead security initiatives across architectural transformations, including monolith-to-microservices migrations and the evolution of cloud-native platforms.
• Champion developer experience while ensuring robust security practices are embedded throughout the software development lifecycle.

Requirements:

• 10+ years of experience in security engineering, with deep specialization in cloud security, secure architecture, and platform security within enterprise environments or high-growth SaaS organizations.
• Proven experience serving as a principal engineer or technical authority, leading large-scale security architecture initiatives, risk mitigation programs, and threat modeling activities.
• Strong hands-on expertise in multi-cloud environments, particularly AWS, GCP, and/or Azure, alongside containerization technologies such as Docker, Kubernetes, and service mesh.
• Extensive experience designing and reviewing security architectures for highly regulated environments, including private, isolated, government, or FedRAMP-compliant cloud offerings.
• Demonstrated experience leading architectural transformations, including securing microservices architectures and large-scale distributed systems.
• Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript, with experience developing scalable security automation and internal tooling.
• Strong knowledge of Infrastructure as Code (IaC), policy-as-code, centralized secrets management, automated security controls, and CI/CD security integrations.
• Deep understanding of cloud security architecture, Zero Trust principles, tenant data isolation, encryption, cryptographic systems, and multi-tenant SaaS environments.
• Experience with cloud detection engineering, distributed telemetry and logging, IAM graph analysis, least-privilege automation, and enterprise alert optimization.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical discipline, or equivalent practical experience.
• Exceptional technical leadership, communication, and stakeholder management skills, with the ability to influence executive leadership and cross-functional engineering teams.
• Proven ability to mentor senior engineers, encourage collaboration, and promote an inclusive engineering culture.
• Strong ownership mindset, proactive problem-solving abilities, and a passion for improving security through automation and continuous innovation.

Additional advantages:

• Experience developing internal software platforms or developer tools that automate security and compliance workflows.
• Contributions to open source security projects, discovery and disclosure of CVEs, or active involvement in security frameworks.
• Experience presenting at recognized cybersecurity conferences or publishing security research.
• Advanced expertise in securing serverless architectures, service meshes, and large-scale Kubernetes environments.
• Experience designing security controls for regulated cloud environments, including sovereign, isolated, and FedRAMP-offering.

Benefits:

• Flexible working arrangements, with the freedom to work remotely or from an office where available.
• Distributed-first working environment with virtual interviews and onboarding.
• Health and wellbeing resources to support employees and their families.
• Paid volunteer days and opportunities to contribute to local communities.
• Access to a collaborative and inclusive international working environment.
• Opportunities to influence large-scale security initiatives and work with advanced cloud technologies.