Staff Cloud Security Architect (AWS/DevSecOps)

GRAIL; Menlo Park (CA); Hybrid; USD 169,000 - 224,000; Full time

Job summary

GRAIL is seeking a Staff Cloud Security Engineer to lead cloud security strategy and secure product delivery across AWS environments. You will guide DevSecOps practices, implement scalable security controls, and mentor engineering teams while aligning with regulatory requirements in a highly regulated healthcare setting.

The role is based in Menlo Park, CA, with hybrid work options and a requirement for significant on-site collaboration to support secure cloud transformations.

Qualifications

• 8+ years in product security, cybersecurity, or related roles.
• Experience leading threat modeling, risk assessments, and vulnerability management for complex software.
• Experience embedding security into CI/CD and DevSecOps practices.

Responsibilities

• Lead design and implementation of cloud security architectures across AWS environments.
• Design and manage AWS-native security services (IAM, KMS, GuardDuty, Security Hub, Macie, WAF, CloudTrail).
• Develop guardrails and governance across accounts, containers, Kubernetes/EKS, and serverless workloads.
• Automate monitoring, compliance validation, vulnerability management, and incident workflows using IaC.
• Mentor engineers on AWS security best practices and secure cloud engineering.

Skills

Cloud security

Threat modeling

DevSecOps

Incident response

Security automation

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field

Job description

GRAIL is seeking a Staff Cloud Security Engineer to lead cloud security strategy and secure product delivery across AWS environments. You will guide DevSecOps practices, implement scalable security controls, and mentor engineering teams while aligning with regulatory requirements in a highly regulated healthcare setting.

The role is based in Menlo Park, CA, with hybrid work options and a requirement for significant on-site collaboration to support secure cloud transformations.