Senior Cloud Security Engineer

Anyscale; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Anyscale, based in San Francisco, is seeking a Senior Cloud Security Engineer to own and harden production and cloud infrastructure across AWS and Azure, with a focus on Kubernetes runtime security and secure design. You will partner with engineering to implement secure architectures and drive remediation across teams.

You will define security standards, manage identity and access, and report on risk and vulnerabilities. This is a senior, hands-on role in a fast-growing startup environment.

Qualifications

• 8+ years of security engineering experience.
• Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes).
• Strong grounding in infrastructure-as-code, cloud networking, and identity and access management.
• Experience with CSPM and runtime security tooling, turning findings into actioned work.
• Ability to own cloud infrastructure security independently and collaborate with engineers.
• Fluency working with engineers on architecture and remediation, not just findings.

Responsibilities

• Own the security posture of production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.
• Own runtime security coverage across Kubernetes environments from deployment through detection of anomalous activity.
• Partner with engineering on secure infrastructure architecture and the secure design of production environments.
• Own cloud security posture management end to end: triage, prioritization, and remediation with resource-owning teams.
• Define and drive cloud infrastructure security standards: baseline configurations, IaC security, and key/secrets management.
• Drive fine-grained, role-based access to production in partnership with engineering and IT.
• Feed infrastructure findings into vulnerability management and risk reporting.

Skills

Security engineering

Cloud security

Kubernetes security

Infrastructure as code

Cloud networking

Identity & access

Cross-functional collaboration

Tools

AWS

Azure

Kubernetes

CSPM tools

Job description

Senior Cloud Security Engineer

At Anyscale, we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray, a popular open-source project that’s creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI, Uber, Spotify, Instacart, Cruise, and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world.

With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert.

Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date.

About the Role

Anyscale's security needs are growing as we operate more production and cloud infrastructure for larger and more demanding customers. We're looking for a Senior Cloud Security Engineer to own the security of that infrastructure. This is a hands-on, high-ownership role: you will own how our production and cloud environments are hardened, isolated, and monitored.

You will set and drive the direction for infrastructure and production security, reporting to the Head of Security and partnering closely with the wider engineering organization. This role is based in the San Francisco, Bay Area.
In your first year, success looks like hardened and well-segmented production environments, strong runtime security coverage across our container footprint, and a clear, defensible story for how we secure the infrastructure our customers rely on.

What You’ll Do

• Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.

• Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity.

• Partner with engineering on secure infrastructure architecture and the secure design of our production environments.

• Own cloud security posture management end to end: triage, prioritization, and driving remediation with the teams that own the resources.

• Define and drive cloud infrastructure security standards: baseline configurations, infrastructure-as-code security, and key and secrets management.

• Drive fine-grained, role-based access to production, in partnership with engineering and IT.

• Feed infrastructure findings into vulnerability management and risk reporting.

What You’ll Bring

• 8+ years in security engineering, with a deep focus on cloud and infrastructure security, ideally at a high-growth startup.

• Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes).

• Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments.

• Experience with CSPM and runtime security tooling, and the judgment to turn findings into prioritized, actioned work.

• The ability to own cloud infrastructure security independently, set its direction, and make sound tradeoffs across teams.

• Fluency working directly with engineers on architecture and remediation, not just producing findings.

Nice to Have

• Experience securing multi-tenant production systems or environments that run customer workloads.

• Familiarity with Upwind or similar CSPM and runtime platforms.

• Experience contributing to SOC 2 or ISO 27001 evidence from the infrastructure side.

• Background in AI or ML platforms or distributed systems.