Senior Cloud & Platform Security Engineer — On-Site, Equity

ATOMS Careers page

San Francisco (CA)

On-site

USD 167,000 - 230,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical, Dental, Vision

401(k)

Equity

Paid time off

Parental leave

Commuter benefits

Team lunch

Job summary

Pronto AI in San Francisco is seeking a Senior Software Engineer focused on Cloud & Platform Security to join our Infrastructure team and secure the systems that manage our fleet. You will bring deep security expertise across identity, secrets, network segmentation, and the fleet-management and remote-vehicle-control APIs that power our autonomy.

This hands-on security role requires collaboration with engineers and architecture reviews to embed security into production-ready services and shape

Qualifications

5+ years of experience in cloud, infrastructure, or platform security.
Hands-on experience working with production Kubernetes environments.
Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
Experience designing or reviewing both coarse-grained and fine-grained authorization models.
Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
Experience managing or securing non-human identities and service-to-service access.
Strong understanding of network segmentation and access boundaries in cloud environments.
Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Responsibilities

Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.