Staff Cloud Security Engineer

Randalls; Pleasanton (CA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Weekly pay

Early wage access

Associate discounts

Health & 401k benefits

Paid time off

Career development

Inclusive workplace

Job summary

Albertsons Companies is seeking a Staff Cloud Security Engineer to lead, engineer, operate, and scale security platforms across multi-cloud environments, protecting cloud infrastructure and AI use cases. You will partner with Security Operations, platform, Identity, and engineering teams to deliver secure-by-default environments.

You will drive risk-based improvements, mentor engineers, and contribute to secure architecture design and threat modeling while supporting AI security capabilities for

Qualifications

• 8+ years in cloud or infrastructure security engineering.
• Strong multi-cloud experience (Azure, GCP, OCI).
• Hands-on with cloud security platforms and posture management.
• Experience partnering with Security Operations or engineering teams.
• Knowledge of cloud networking, IAM, and secure-by-default configurations.

Responsibilities

• Engineer, deploy, and operate cloud security platforms across multi-cloud environments.
• Own and evolve security baselines and controls.
• Support investigations and incident response in cloud environments.
• Contribute to secure architecture design and threat modeling.
• Mentor across engineering and security teams.

Skills

Cloud security engineering

Multi-cloud (Azure, GCP, OCI)

Security platforms (WIZ, Cortex Cloud,

Tools

WIZ

Cortex Cloud

Tenable CS

Job description

Why choose us?

Are you ready to take the next step in your career? Join us for an exciting opportunity at Albertsons Companies, where innovation and customer service go hand-in-hand!

At Albertsons Companies, we are looking for someone who's not just seeking a job, but someone who wants to make an impact. In this role, you'll have the opportunity to lead, innovate, and contribute to the growth of a company that values great service and lasting customer relationships. This position offers the chance to work in a fast-paced, dynamic environment that's constantly evolving.

As a Staff Cloud Security Engineer, you will lead efforts to engineer, operate, and scale security platforms that protect cloud infrastructure and next-generation AI use cases, while partnering closely with Security Operations, platform, Identity, and engineering teams.

You will work across multi-cloud environments to deploy and maintain security controls and platforms, ensuring our environments are secure by default and continuously improving over time.
In this role, you will also help expand and support AI security capabilities, contributing to the deployment and operation of platforms that secure AI-enabled applications and data workflows.
Along the way, you will serve as a trusted security partner, helping teams reduce risk, improve configurations, and build secure, scalable solutions for the business.

This position will be based out of Pleasanton, CA or Boise, ID

Main responsibilities:

• Engineer, deploy, and operate security platforms supporting cloud environments (ex: WIZ, Tenable CS, Sonrai, Prisma)
• Own and evolve security control baselines across multi-cloud deployments
• Apply a risk-based approach to improve cloud security posture continuously
• Partner with Security Operations to ensure platforms are actionable, reliable, and scalable
• Collaborate with Identity, platform, and application teams to implement secure-by-default configurations
• Identify and implement automation opportunities to streamline remediation and reduce operational overhead
• Continuously assess control effectiveness and drive improvements based on threats, trends, and operational feedback
• Support investigations, incident response, and remediation activities across cloud environments
• Contribute to secure architecture design, threat modeling, and design reviews
• Deploy and support AI security capabilities for emerging platforms and use cases
• Act as a subject matter expert and mentor across engineering and security teams
  

We are looking for candidates who possess the following:

• Required
  • 8 plus years of experience in cloud or infrastructure security engineering
  • Strong experience across multi-cloud environments (Azure, GCP, OCI)
  • Hands-on experience engineering and operating:
    • Cloud security platforms (ex: wiz, cortex cloud, Tenable cs)
    • Posture management and detection capabilities
    • Identity and access controls
  • Experience partnering with Security Operations or engineering operations teams
  • Strong understanding of:
    • Cloud networking, IAM, and distributed architectures
    • Security control design and implementation
    • Risk-based decision making and prioritization
  • Proven ability to deploy, scale, and support security platforms in production environments
    
• Preferred
  • Experience supporting or deploying AI/ML or AI-enabled platforms
  • Understanding of AI-related risks such as:
    • Data exposure and leakage
    • Prompt injection or misuse scenarios
  • Experience working with AI security, governance, or posture management capabilities
    
• Nice to Have
  • Experience with infrastructure-as-code or automation, including:
    • YAML-based configuration
    • Python for scripting, automation, or integrations
  • Background in DevSecOps or application security practices
  • Familiarity with compliance frameworks (PCI, SOX, HIPAA)

We also provide a variety of benefits including:

• Competitive wages paid weekly
• Access to up to 50% of your earned wages before payday, via our partnership with Stream
• Associate discounts
• Health and financial well-being benefits for eligible associates (Medical, Dental, 401k and more!)
• Time off (vacation, holidays, sick pay). For eligibility requirements please visit myACI Benefits
• Leaders invested in your training, career growth and development
• An inclusive work environment with talented colleagues who reflect the communities we serve

Our Values – Click below to view video: ACI Values

A copy of the full job description can be made available to you.

#LI-MF1