Security Engineer – Application & Cloud Automation

Zello; Austin, Northern (TX, KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Zello is a voice-first communications platform seeking a Security Engineer to join the Security Engineering team as the second engineer. You will share rotation with the Director and build automation to scale security without headcount, focusing on CI/CD security, cloud hardening, and vulnerability management.

You should have shipped security automation in code, applied AI/LLMs to security work, and understand IAM, identity, and tenancy. GCP is ideal; AWS or Azure acceptable.

Qualifications

• Experience building security automation in code and production deployments.
• Experience applying AI/LLMs to real security work and evaluating outputs.
• Ability to read application code and identify exploitable auth/identity/secrets flaws.
• Experience rolling out security scanning in CI and turning results into fixes.
• Experience securing IAM and workloads in major cloud platforms (GCP preferred).

Responsibilities

• Take your turn on interrupt duty—triage findings, incidents, and security assessments.
• Tune AI security reviewer and triage agents to assign calls to humans when needed.
• Build intake pipeline routing findings to owning teams with SLA clocks.
• Lead Google Cloud hardening across IAM, org policy, and workload configuration.
• Roll out code scanning and supply chain controls in GitHub and CI/CD.
• Review code and designs touching authorization, identity, and tenancy; push fixes.
• Write runbooks and requirements so the team can run security processes independently.

Skills

Security engineering

Cloud security

Automation in code

AI/LLMs in security

Incident response

Tools

GitHub

CI/CD tooling

GCP

AWS

Azure

Job description

Zello is a voice-first communications platform seeking a Security Engineer to join the Security Engineering team as the second engineer. You will share rotation with the Director and build automation to scale security without headcount, focusing on CI/CD security, cloud hardening, and vulnerability management.

You should have shipped security automation in code, applied AI/LLMs to security work, and understand IAM, identity, and tenancy. GCP is ideal; AWS or Azure acceptable.