Security Engineer II, Product & Platform Security

nscaleoperationsukltd; Houston (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

Nscale is seeking a Security Engineer II to protect cloud platforms, GPU clusters, and production environments. You will investigate findings, separate noise from risk, and collaborate with engineering to remediate root causes.

The role is hands-on with cloud security, detection, and response, focusing on improving telemetry, incident handling, and secure-by-design guardrails across AWS, GCP, or Azure.

Qualifications

• 2–5 years of security experience in security operations, cloud security, detection and response, or forensics.
• Experience triaging findings and alerts, distinguishing real risk from noise.
• Working knowledge of cloud security posture management in AWS, GCP, or Azure with common misconfigurations.
• Familiarity with logging, SIEM, and the telemetry needed to detect and investigate threats.
• Exposure to incident response and digital forensics with timelines, evidence handling, and root‑cause analysis.
• Comfort working with Kubernetes, containers, Linux, and APIs.
• Clear written communication: findings, severity assessments, and actionable steps for engineers.

Responsibilities

• Review cloud posture findings from CSPM and security tooling across cloud platforms and GPU infrastructure.
• Validate findings in live environments, assess impact, and assign severity for remediation.
• Partner with platform and engineering teams to drive remediation and track findings to closure.
• Identify recurring misconfigurations and establish guardrails for secure-by-design systems.
• Triage production security alerts, determine urgency and blast radius, and escalate when warranted.
• Maintain thorough investigation records and feed lessons into detections and runbooks.

Skills

Cloud security

Security operations

Detection & response

Incident response

Kubernetes

Linux

APIs

Logging & SIEM

Written communication

Tools

Kubernetes

SIEM tooling

Cloud security tooling

Job description

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you'll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you'll be contributing to building the technology that powers the future.

About the Role

Help protect Nscale's cloud platforms, hyperscale GPU clusters, and production environments. As a Security Engineer II in our Product & Platform Security team, part of the CISO organisation, you'll investigate real findings and incidents, separate meaningful risk from noise, and work with engineering to resolve the causes.

This is a hands‑on cloud‑security, detection, and response role. You'll review cloud posture, triage production threats, improve the telemetry needed to investigate them, and turn incident findings into lasting improvements in controls and coverage.

What you’ll be doing

Cloud posture and findings review

• Review findings from cloud security posture management (CSPM) and cloud-security tooling across our cloud platforms and GPU infrastructure.
• Validate findings against live environments, assess technical and business impact, and assign severity so teams address the right risks first.
• Partner with platform, infrastructure, and engineering teams to drive remediation and track findings to closure.
• Identify recurring misconfigurations and exposure patterns, address their systemic causes, and establish guardrails that make systems secure by design.

Production threat triage

• Triage security alerts and threats in production, determining what's real, how urgent it is, and its potential blast radius.
• Own classification, enrichment, and escalation into incident response when warranted, involving system owners to understand the architecture and impact.
• Keep clear records of what you observed, what you decided, and why.
• Feed lessons back into detections and runbooks so future alerts are easier to assess and act on.

Log and telemetry coverage

• Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services.
• Identify missing sources, fields, or retention, and work with platform and engineering teams to close coverage gaps.
• Help ensure security‑relevant telemetry reaches logging and SIEM pipelines reliably and supports detection and investigation.
• Contribute to detections and alerting, prioritising signal quality over volume.

Forensics and investigation

• Reconstruct incidents, establish scope and impact, and determine whether findings are exploited, exploitable, or false alarms.
• Perform host, container, and cloud forensics, using timelines, artefacts, and evidence to support incident response and root‑cause analysis.
• Contribute to blameless post‑incident reviews and translate lessons into stronger controls, better coverage, and improved processes.
• Maintain detailed investigation and resolution records for audit and compliance purposes.

KPIs

• Time to validate, prioritise, and resolve cloud posture findings and production alerts
• Reduction in recurring misconfiguration and exposure types
• Log and telemetry coverage across critical cloud, platform, and production systems
• Quality and timeliness of investigations and post‑incident improvements

About You

• 2-5 years of security experience, with hands‑on work in security operations, cloud security, detection and response, or incident response and forensics.
• Practical experience triaging findings and alerts, with the judgement to distinguish real risk from noise.
• Working knowledge of cloud security and posture management in AWS, GCP, or Azure, including common infrastructure misconfigurations and exposures.
• Familiarity with logging, SIEM, and detection tooling, and the telemetry needed to detect and investigate threats.
• Exposure to incident response and digital forensics, including timelines, evidence handling, and root‑cause analysis, with an eagerness to deepen that expertise.
• Comfort working with and investigating Kubernetes, containers, Linux, and APIs.
• Clear written communication: findings, severity assessments, and actionable next steps for engineers and leadership.
• A collaborative approach and ownership of findings through resolution, working with engineering to fix root causes.

Nice to have

• Experience with GPU/HPC or large‑scale multi‑tenant cloud infrastructure.
• Python, Go, or Bash scripting and automation to reduce repetitive work and scale investigations.