Senior Cloud Security Engineer

Intercom; San Francisco (CA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive salary and equity in a fast-growing startup

Weekly lunch and fully stocked kitchen

Comprehensive health and dental insurance

Job summary

A leading AI customer service firm in San Francisco seeks a Senior Cloud Security Engineer. This role focuses on securing AWS environments, investigating advanced threats, and developing security strategies. Candidates should have a strong background in cloud computing, experience with AWS security controls, and proficiency in programming languages like Python. The position supports hybrid working, with benefits including competitive salary, equity, and flexible paid time off.

Qualifications

• Experience in investigating advanced threats and detecting cloud-native attacker techniques.
• Solid understanding of managing AWS security controls effectively.
• Ability to thrive in fast-moving environments with autonomy.

Responsibilities

• Leverage cloud-native security tools to enhance security posture.
• Develop strategies for the Detection and Response program.
• Collaborate to manage and resolve security incidents.

Skills

AWS security controls management

Threat detection engineering

High-level programming (Python, Ruby)

Infrastructure as Code (IaC) implementation

Cloud-native security tools (IAM, GuardDuty)

Tools

Terraform

AWS CloudFormation

EDR and SIEM

Job description

Company Overview

Intercom is the AI customer service company on a mission to help businesses provide incredible customer experiences. Our AI agent Fin, the most advanced customer service AI agent on the market, lets businesses deliver always‑on, impeccable customer service and ultimately transform their customer experiences for the better. Founded in 2011 and trusted by nearly 30,000 global businesses, Intercom is setting the new standard for customer service. Driven by our core values, we push boundaries, build with speed and intensity, and consistently deliver incredible value to our customers.

Opportunity

As a Senior Cloud Security Engineer you will have experience in investigating advanced threats, detecting cloud‑native attacker techniques, and securing AWS environments, with a focus on technical controls, incident response, and detection engineering. You will work with other engineering teams to identify and mitigate risks across our cloud infrastructure, develop and enforce security measures within our cloud infrastructure, and deliver a safe and secure engineering environment. You will identify and detect threats to our business and drive our response to security incidents. The ideal candidate has a strong background in cloud computing, infrastructure as code, and a deep understanding of AWS services.

Responsibilities

• Leverage cloud‑native security tools (e.g., IAM, GuardDuty, AWS WAF, Security Hub) along with EDR and SIEM to enhance security posture.
• Develop strategies, frameworks, automations, and processes to advance the Detection and Response program.
• Create protective and detective controls using open‑source and closed‑source intelligence sources to address gaps and detect potential intrusions.
• Collaborate with product engineering teams to manage and resolve security incidents, ensuring effective containment and mitigation.
• Automate security controls and compliance checks to maintain adherence to security standards.
• Partner with infrastructure teams to expand automation and infrastructure as code practices for secure, scalable operations.

Qualifications

• Experience in investigating advanced threats and detecting cloud‑native attacker techniques using a modern detection engineering approach, with deep expertise in attacker behavior, technical controls, and diverse technologies.
• Experience securing AWS environments, developing detections, and responding to security incidents, including containment, investigation, and recovery.
• Solid understanding and demonstrated expertise managing AWS security controls and ensuring the security of cloud service offerings (IAM, VPC, firewalls/ACL, IDS/IPS, WAF, Linux hosts, serverless, etc.).
• Proficiency in a high‑level programming language (e.g., Python, Ruby) for automation of security tasks.
• Experience implementing Infrastructure as Code (IaC) practices using tools such as Terraform, AWS CloudFormation, or similar.
• Ability to thrive in a fast‑moving environment, with the autonomy to prioritise, explore, and determine your own solutions to problems.

Support and Development

You will report to the Cloud Security Engineering Manager. You will buddy with another Dublin‑based Cloud Security engineer who will help you onboard and get up to speed quickly. You will have a close group of InfoSec peers to collaborate with and learn from. We invest heavily in our engineers, supporting individual career development through training and coaching.

Benefits

• Competitive salary and equity in a fast‑growing startup
• Weekly lunch and a variety of snack foods plus a fully stocked kitchen
• Regular compensation reviews – rewarding great work
• Pension scheme & match up to 4%
• Peace of mind with life assurance, and comprehensive health and dental insurance for you and your dependents
• Flexible paid time off policy
• Paid maternity leave and 6‑week paternity leave for fathers
• Cycle‑to‑work scheme with secure bike storage
• MacBooks are standard; Windows for certain roles when needed

Hybrid Working Policy

Intercom has a hybrid working policy. We expect employees to be in the office at least three days per week. We believe that working in person helps us stay connected, collaborate easier, and create a great culture while still providing flexibility to work from home.

Equal Employment Opportunity Statement

Intercom values diversity and is committed to a policy of Equal Employment Opportunity. Intercom will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other legally recognized protected basis under federal, state, or local law.

How to Apply

Interested in this position? Please submit your resume and cover letter through the application portal.