Staff Cloud Security Engineer – AWS/GCP Expert

Arena Intelligence, Inc.; California; On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Comprehensive health and wellness bene

Competitive compensation aligned to市场

Job summary

Arena Intelligence is seeking a staff-level cloud security engineer to design and implement practical controls for our cloud infrastructure. This onsite role sits in the San Francisco Bay Area and reports to the Head of Security.

You will build protections around workload identity, secrets management, and infrastructure security checks, embedding secure practices into code and CI/CD to make secure cloud operations repeatable and observable for the engineering teams.

Qualifications

• 6+ years in security or infrastructure engineering, with at least 3 years focused on cloud security.
• Hands-on experience securing AWS, GCP, and Cloudflare.
• Demonstrated ownership of cloud security initiatives, including IAM design and secrets management.
• Proficient with Terraform and at least one scripting language such as Python, Go, or TypeScript.
• Experience securing CI/CD pipelines and build tooling.

Responsibilities

• Design a cloud identity model for workloads, including least-privilege IAM, workload identity federation, and short-lived credentials.
• Own machine secrets and rotation end to end, including storage in a central secret manager and rotation path.
• Define network and access rules for environments and services.
• Build cloud security detections and alerts for high-risk changes and outline response steps.
• Embed cloud security checks into infrastructure code and build pipelines for secure workflows.
• Secure machine credentials and permissions used by source control, build pipelines, and cloud deployments.
• Assess technical access requested by vendors and managed platforms before onboarding.
• Lead technical response to cloud security events and coordinate recovery.
• Maintain visibility into cloud security posture for engineering and leadership.

Skills

Security engineering

Cloud security

On-call / incident response

Tools

AWS

GCP

Cloudflare

Terraform

Python

Go

TypeScript

GitHub Actions

Job description

Arena Intelligence is seeking a staff-level cloud security engineer to design and implement practical controls for our cloud infrastructure. This onsite role sits in the San Francisco Bay Area and reports to the Head of Security.

You will build protections around workload identity, secrets management, and infrastructure security checks, embedding secure practices into code and CI/CD to make secure cloud operations repeatable and observable for the engineering teams.