Senior Product/Cloud Security Engineer

JetBrains; United States; Remote; USD 140,000 - 175,000; Full time

Job summary

JetBrains in the United States is seeking a Senior Cloud Security Engineer to strengthen the security of the JetBrains Air platform and services. You will own cloud and product security across AWS and GCP, influencing design choices and security controls.

You will partner with platform engineering, SRE, and product teams to integrate guardrails into developer workflows, perform threat modeling, risk assessments, and drive measurable reductions in risk across the SDLC.

Qualifications

• Professional experience in security engineering for SaaS or cloud-native services.
• Strong AWS and/or GCP security expertise and direct architecture assessment.
• Hands-on security architecture reviews and threat modeling.
• Experience translating security requirements into engineering realities.

Responsibilities

• Lead cloud security improvements across JetBrains Air and related services.
• Define baselines for AWS/GCP including IAM, networking, and data protection.
• Operate security platforms and vulnerability-management solutions.
• Collaborate with platform engineering, SRE, and product teams to implement secure controls.
• Contribute to threat modeling, risk assessments, and security design reviews.

Skills

Security engineering

Cloud security

Threat modeling

Architectural risk

Ownership

Communication

Collaboration

Tools

Wiz

Orca Security

Upwind

Tenable

Job description

xml version="1.0" encoding="UTF-8"?

Are you excited by the challenge of strengthening the security of cloud platforms without slowing engineering teams down? We believe that real cloud security is about setting smart baselines, modeling threats early, and embedding guardrails directly into developer workflows, and we’re keen to hear about how you can help us implement this mentality

About JetBrains

We create intelligent software development tools for developers and teams. More than 15 million users, over 300,000 companies, and 88 of the Fortune Global Top 100 rely on our products to solve real, complex problems. Our mission is simple: make development teams more productive and AI adoptable at scale.

What you’ll do

As our cloud footprint grows, we are investing heavily in the security of the platforms and products that support them. We are looking for a Senior Product/Cloud Security Engineer to help us strengthen the security of the JetBrains Air platform and the services built on top of it. In this role, you’ll take ownership of cloud and product security across our AWS and GCP environments. You’ll work directly on design choices, architecture reviews, and automation that reduce risk across the entire software development lifecycle. You’ll partner closely with platform engineering, SRE, and product teams to make secure choices the easiest path for developers. You will have substantial ownership and influence across teams while staying close to technical details.

Day to day, you will:

• Lead and continuously improve cloud security across JetBrains Air, including security posture, preventive controls, detection, and remediation.
• Define, maintain, and measure security baselines for AWS and GCP environments, covering IAM, networking, data protection, and workload configuration.
• Operate and evolve cloud security platforms and vulnerability-management solutions (e.g. Wiz, Orca Security, Upwind, Tenable, etc.).
• Establish effective processes for triaging, prioritizing, assigning, and remediating cloud security findings and vulnerabilities.
• Partner with platform engineering, SRE, and product engineering teams to design and implement practical security controls that fit naturally into developer workflows.
• Perform security design and architecture reviews for cloud services, APIs, and integrations.
• Conduct threat modeling and risk assessments to provide clear, actionable recommendations.
• Review product and platform changes for security implications throughout the entire software development lifecycle, from early design to production.
• Help improve security automation by integrating security checks, guardrails, and evidence into engineering and delivery pipelines.
• Support incident response, root-cause analysis, and drive systemic improvements that reduce recurrence.
• Develop meaningful metrics for cloud and product security, communicate trends and risks, and help prioritize security investments.
• Contribute to security standards, guidance, runbooks, and patterns that make secure engineering easier across JetBrains.

What you’ll bring

• A pragmatic engineering mindset that balances security controls with developer velocity.
• A strong sense of ownership and the initiative to spot complex risks and address them early.
• Excellent communication skills, with the ability to explain technical trade-offs clearly to both engineers and stakeholders.
• A collaborative mentality when working across distributed teams and engineering disciplines.
• A high bar for quality and a commitment to building sustainable, long-term security baselines.
• A curious and analytical approach to threat modeling and architectural risk.

What you’ll need

• Established professional experience in security engineering or a closely related technical security domain, securing SaaS products or cloud-native services.
• Strong experience with AWS and/or GCP security – specifically the ability to assess architecture and configurations directly, rather than relying solely on tool outputs.
• Practical experience deploying, operating, or integrating cloud security and vulnerability-management platforms (e.g., Wiz, Orca Security, Upwind, Tenable).
• Hands-on experience with security architecture reviews, threat modeling, vulnerability management, and risk-based prioritization.
• Solid understanding of modern SaaS architectures (APIs, microservices, containers, Kubernetes, identity providers, networking, and managed cloud services).
• Experience working closely with engineering, SRE, and product teams to translate security requirements into practical engineering solutions.
• Excellent written and spoken English.

Nice to have

• Experience building security automation or integrating security controls into CI/CD and infrastructure-as-code (IaC) workflows.
• Hands-on experience with Terraform or other IaC tools.
• Experience securing Kubernetes-based platforms and containerized workloads.
• Familiarity with detection engineering, cloud-native logging and monitoring, or security operations workflows.
• Scripting or programming experience in Pytho