Senior Cloud & Platform Security Engineer — Equity & Impact

Cssmerge; San Francisco (CA); On-site; USD 167,000 - 230,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Disability

Life Insurance

401(k)

Equity

Sick Time

Unlimited Flexible Time Off

Paid Holidays

Paid Parental Leave

Pre‑Tax Commuter Benefit Plan

Team lunch in our SoMa office every Y

Job summary

Pronto AI is seeking a Senior Software Engineer focused on Cloud & Platform Security to join our San Francisco team. You’ll partner with the Infrastructure group to secure fleet-management and remote-vehicle-control systems, emphasizing non-human identities, secrets, and API security.

You will drive least-privilege access, threat modeling, and Kubernetes security improvements while collaborating across engineering functions to protect production environments.

Qualifications

• 5+ years of experience in cloud, infrastructure, or platform security.
• Hands-on experience working with production Kubernetes environments.
• Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
• Experience designing or reviewing both coarse-grained and fine-grained authorization models.
• Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
• Experience managing or securing non-human identities and service-to-service access.
• Strong understanding of network segmentation and access boundaries in cloud environments.
• Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Responsibilities

• Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
• Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
• Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
• Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
• Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
• Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.

Skills

Cloud security

Kubernetes

API security

Authorization design

Secrets management

Non-human identities

Network segmentation

Cross-team collaboration

Tools

HashiCorp Vault

Cloud KMS

Istio

Job description

Pronto AI is seeking a Senior Software Engineer focused on Cloud & Platform Security to join our San Francisco team. You’ll partner with the Infrastructure group to secure fleet-management and remote-vehicle-control systems, emphasizing non-human identities, secrets, and API security.

You will drive least-privilege access, threat modeling, and Kubernetes security improvements while collaborating across engineering functions to protect production environments.