Staff Cloud Security Architect

BioSpace; Sunnyvale (CA); Hybrid; USD 169,000 - 224,000; Full time

Benefits offered by this job

401(k) retirement plan with employer

Medical, dental, and vision coverage

Flexible hybrid arrangement

Job summary

GRAIL is seeking a Staff Cloud Security Engineer to lead cloud security across AWS, guiding DevSecOps and secure product delivery in a highly regulated healthcare tech environment.

You will partner with Engineering, Platform, Infrastructure, and Compliance teams to implement scalable security controls and governance while maintaining delivery velocity. This role is based in Sunnyvale, CA with a flexible hybrid arrangement.

Qualifications

• 8+ years in product security, cybersecurity, Cloud Security, or related security roles.
• Hands-on experience leading threat modeling, security risk assessments, and vulnerability management for complex software products.
• Experience embedding security into modern software development environments, including CI/CD and DevSecOps practices.

Responsibilities

• Lead design, implementation, and improvement of cloud security architectures across AWS environments.
• Partner with Platform and Cloud Engineering to manage AWS security services (IAM, KMS, GuardDuty, etc.).
• Develop and enforce cloud security standards, guardrails, and governance across accounts, containers, and serverless workloads.
• Automate security monitoring, compliance validation, vulnerability management, and incident response workflows with IaC and automation tools.
• Conduct cloud threat modeling, risk assessments, and security reviews for AWS-hosted apps and APIs.
• Secure DevOps platforms by enforcing least-privilege access, secrets management, and network segmentation.
• Enhance CSPM, container security, and runtime protection across AWS environments.
• Coordinate penetration testing, vulnerability assessments, and advanced security testing across cloud infra.
• Serve as cloud security SME during incidents, investigations, root-cause analysis, and remediation activities.
• Align cloud security strategies with regulatory, privacy, and industry cybersecurity requirements.
• Define and report cloud security metrics and KPIs for visibility into security posture.

Skills

Cloud security

Threat modeling

DevSecOps

Security architecture

Incident response

Education

Bachelor's in Cybersecurity

Tools

IAM

KMS

GuardDuty

Security Hub

Inspector

Macie

WAF

Shield

CloudTrail

Config

CloudWatch

Job description

GRAIL is seeking a Staff Cloud Security Engineer to lead cloud security across AWS, guiding DevSecOps and secure product delivery in a highly regulated healthcare tech environment.

You will partner with Engineering, Platform, Infrastructure, and Compliance teams to implement scalable security controls and governance while maintaining delivery velocity. This role is based in Sunnyvale, CA with a flexible hybrid arrangement.