Staff Cloud Security Engineer — Go & AWS for EV Platform

ALSO.; Palo Alto (CA); On-site; USD 205,000 - 240,000; Full time

Benefits offered by this job

Robust health coverage

One Medical membership

Progyny fertility benefits

Flexible time off

401(k) match

Job summary

ALSO. is seeking a Staff Security Engineer for Cloud to own security end-to-end in a connected, software-defined EV platform.

You will design the security architecture and implement it in Go alongside the backend team, addressing telemetry, diagnostics, and fleet APIs with a focus on scale and safety. The role requires deep AWS and Kubernetes security expertise, threat modeling, and hands-on coding to ship secure services, CI/CD controls, and incident response.

Qualifications

• 10+ years in backend and infrastructure engineering with production security ownership.
• Expert, hands-on AWS security including IAM, VPC design, KMS, Secrets Manager and guardrails.
• Deep Kubernetes security—RBAC, admission controllers, policies, and runtime protection.
• Fluent Go development for security services and tooling.
• Experience with threat modeling, incident response, and security reviews.

Responsibilities

• Own cloud security end to end across AWS, Kubernetes and microservices.
• Design and implement workload identity, org IAM and least privilege.
• Harden containers, admission control, network policy, and service mesh security.
• Secure the software supply chain: SBOMs, scanning, signed artifacts, CI/CD gatekeeping.
• Develop Go-based authorization services and policy enforcement tooling.
• Operate detection, telemetry, alerting, runbooks, and on-call for security incidents.
• Secure vehicle-to-cloud boundary with device identity, OTA updates and PKI lifecycle.
• Lead security assurance activities including tests, vulnerability management, and postmortems.

Skills

Backend engineering

Cloud security

AWS security

Kubernetes security

Go programming

Threat modeling

CI/CD security

Incident response

Identity & access management

Security governance

Education

Bachelor's degree

Tools

KMS

Secrets Manager

GuardDuty

Security Hub

CloudTrail

Config

EKS

ECS

ECR

Lambda

Job description

ALSO. is seeking a Staff Security Engineer for Cloud to own security end-to-end in a connected, software-defined EV platform.

You will design the security architecture and implement it in Go alongside the backend team, addressing telemetry, diagnostics, and fleet APIs with a focus on scale and safety. The role requires deep AWS and Kubernetes security expertise, threat modeling, and hands-on coding to ship secure services, CI/CD controls, and incident response.