Senior Cloud Security Engineer: Build Secure Infra

perplexity; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Perplexity is seeking a highly experienced Cloud Security Engineer to join our security team in San Francisco, CA. You will lead efforts to build secure, scalable cloud infrastructure that enables engineers to innovate quickly and safely.

Responsibilities include embedding security into development workflows, deploying guardrails with Terraform, and using AWS GuardDuty, Security Hub, and AWS Config to detect threats and ensure compliance across SOC 2 Type II and ISO 27001.

Qualifications

• 8+ years of experience in cloud infrastructure or platform engineering.
• Proven track record building scalable, secure cloud platforms.
• Strong programming skills in Python or Go.

Responsibilities

• Embed security into development workflows and promote secure-by-default patterns.
• Build Terraform modules with built-in security guardrails.
• Deploy detections using AWS GuardDuty and Security Hub to identify threats.
• Maintain SOC 2 Type II and ISO 27001 compliance through automated evidence collection.
• Audit cloud configurations with AWS Config and OPA; remediate deviations from CIS benchmarks.
• Secure CI/CD and supply chain pipelines with artifact signing and secret scanning.
• Enforce zero-trust networking across cloud environments and participate in on-call rotation.

Skills

Cloud infrastructure

Security in dev workflows

Terraform proficiency

Python/Go

Multi-cloud (bonus)

Tools

AWS GuardDuty

AWS Security Hub

AWS Config

Open Policy Agent

Terraform

Job description

Perplexity is seeking a highly experienced Cloud Security Engineer to join our security team in San Francisco, CA. You will lead efforts to build secure, scalable cloud infrastructure that enables engineers to innovate quickly and safely.

Responsibilities include embedding security into development workflows, deploying guardrails with Terraform, and using AWS GuardDuty, Security Hub, and AWS Config to detect threats and ensure compliance across SOC 2 Type II and ISO 27001.