Senior Cloud Security Engineer - DevSecOps & IAM Lead

ServiceTitan, Inc.; Northern (KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Flextime & learning

Medical/dental/vision coverage

401k match

Parental leave

Fertility support

Maven Maternity

Breast milk shipping

Pet insurance

Job summary

ServiceTitan, Inc. is seeking a Staff Cloud Security Engineer to shape the security foundation of our cloud environments and applications. You will design automated security controls, harden multi-cloud infrastructure, and champion secure development practices across the organization.

You’ll lead DevSecOps initiatives, build feedback loops, and implement secure CI/CD pipelines, while ensuring data protection and threat detection across AWS, Azure, or GCP.

Qualifications

• 7-10+ years of hands-on experience in cloud security, application security, DevSecOps, or related engineering roles.
• Deep hands-on experience with Azure and/or AWS security services, including the design and maintenance of multi-cloud application controls.
• Proficiency in scripting (Python, Bash, PowerShell) to automate security tasks.
• Strong understanding of container security (Docker, Kubernetes) and IaC security (Terraform, ARM).
• Industry certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, GCSA, or OSCP are highly preferred.

Responsibilities

• DevSecOps and Automation Pipeline Integration: Integrate robust security controls directly into CI/CD platforms such as GitHub, GitLab, Jenkins, or Azure DevOps.
• Automated Scanning: Evaluate and implement pipeline-based security IaC scanning; manage and configure IaC scanning tools to surface true risk.
• Developer Feedback Loops: Build and optimize developer feedback loops and automated remediation workflows to secure software by default.
• Identity and Access Management (IAM) Cloud Identity Controls: Build and maintain IAM security controls across cloud platforms, enforcing least privilege.
• Non-Human Identity Management: Standardize management, security controls, and lifecycle expectations for non-human identities.
• Secrets Management: Govern secure use of cloud identities, APIs, and secrets management.
• Infrastructure Security and Hardening: Develop secure baselines, vulnerability management, and hardening standards across AWS, Azure, or GCP.
• Infrastructure as Code: Validate security configurations with Terraform, CloudFormation, or Bicep.

Skills

Cloud security

DevSecOps

Scripting

Container security

IaC security

IAM security

Tools

Terraform

CloudFormation

Bicep

Docker

Kubernetes

Job description

ServiceTitan, Inc. is seeking a Staff Cloud Security Engineer to shape the security foundation of our cloud environments and applications. You will design automated security controls, harden multi-cloud infrastructure, and champion secure development practices across the organization.

You’ll lead DevSecOps initiatives, build feedback loops, and implement secure CI/CD pipelines, while ensuring data protection and threat detection across AWS, Azure, or GCP.