Senior Cloud Security Engineer - AWS & DevSecOps

Initial Therapeutics, Inc.; Menlo Park (CA); Hybrid; USD 169,000 - 224,000; Full time

Job summary

GRAIL seeks a Staff Cloud Security Engineer in a flexible hybrid setup anchored in Menlo Park, CA, with relocation to Sunnyvale in Fall 2026. You will shape cloud security strategy, lead secure product delivery, and guide DevSecOps practices across AWS environments to safeguard life-saving cancer detection technology.

You will partner with Engineering, Platform, Infrastructure, Compliance, and Product teams to ensure regulatory and privacy requirements are met while driving scalable security

Qualifications

• 8+ years of experience in product security, cybersecurity, Cloud Security, application security, or related technical security roles.
• Hands-on experience leading threat modeling, security risk assessments, and vulnerability management for complex software products.
• Experience embedding security into modern software development environments, including CI/CD and DevSecOps practices.
• Experience supporting security incident response and conducting root cause analysis in production environments.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent practical experience.

Responsibilities

• Lead the design, implementation, and continuous improvement of cloud security architectures across AWS environments, ensuring product security and secure-by-design principles throughout the lifecycle.
• Partner with Platform and Cloud Engineering to design, implement, and manage AWS-native security services (IAM, KMS, GuardDuty, Security Hub, Inspector, Macie, WAF, Shield, CloudTrail, Config, CloudWatch).
• Develop and enforce cloud security standards, guardrails, and governance across AWS accounts, containers, Kubernetes/EKS, serverless, and hybrid workloads.
• Automate security monitoring, compliance validation, vulnerability management, and incident response workflows using IaC and cloud-native tools.
• Conduct cloud threat modeling, architecture risk assessments, and security reviews for AWS-hosted applications, APIs, infrastructure, and enterprise systems.
• Mentor engineers on AWS security best practices, DevSecOps methodologies, and secure cloud engineering to raise security maturity.

Skills

Threat modeling

Security risk assessments

Vulnerability management

CI/CD & DevSecOps

Cloud security

AWS security

DevSecOps practices

Security incidents response

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems

Tools

IAM

KMS

GuardDuty

Security Hub

Inspector

Macie

WAF

CloudTrail

Job description

GRAIL seeks a Staff Cloud Security Engineer in a flexible hybrid setup anchored in Menlo Park, CA, with relocation to Sunnyvale in Fall 2026. You will shape cloud security strategy, lead secure product delivery, and guide DevSecOps practices across AWS environments to safeguard life-saving cancer detection technology.

You will partner with Engineering, Platform, Infrastructure, Compliance, and Product teams to ensure regulatory and privacy requirements are met while driving scalable security