Staff Cloud Security Engineer — Go & Kubernetes

Also, Inc.; Palo Alto, Northern (CA, KY); Hybrid; USD 205,000 - 240,000; Full time

Benefits offered by this job

Health coverage

One Medical membership

Fertility and family benefits

Flexible time off

401(k) match

Job summary

ALSO is seeking a Staff Security Engineer for Cloud to own security end-to-end for a connected, software-defined EV platform. You will design and build security in Go alongside the backend team, tackling threat modelling, IAM, TLS, and software supply chain security.

Lead architecture reviews and drive DevSecOps practices across AWS, Kubernetes, and microservices. You will harden containers, implement policy, and oversee incident response, with a focus on scalable security that enables

Qualifications

• 10+ years in backend and infrastructure engineering with security ownership.
• Expert, hands-on AWS: IAM, VPC, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config, org guardrails.
• Deep Kubernetes and container security—RBAC, admission controllers, network policy, runtime detection.
• Fast, fluent Go: design, review, and ship production Go code today.
• Identity protocols and applied cryptography in practice: OAuth2, OIDC, JWT, mutual TLS.
• Threat modelling and secure architecture reviews as routine practice.
• Demonstrated 0 to 1 ownership of a security function or program.

Responsibilities

• Own cloud security end to end—strategy, architecture, implementation, and operations across AWS, Kubernetes, and microservices.
• Design and implement identity and access at scale, secrets management, and mutual TLS between services.
• Harden containers and orchestration with image provenance, admission control, and policy enforcement.
• Secure the software supply chain: SBOM, scanning, signed artifacts, CI/CD guardrails.
• Build controls in Go and serve as the DevSecOps function to enable speed with security.
• Run detection and response: logging, alerting, runbooks, on-call for incidents, postmortems.
• Secure vehicle-to-cloud boundary: device identity, certificate rotation, secure OTA updates.
• Contribute to core backend work and assurance, including penetration tests and vulnerability management.

Skills

Backend security

Go programming

Kubernetes security

Threat modelling

IAM & access control

CI/CD security

Mutual TLS

Identity protocols

Cloud security architecture

Incident response

Tools

AWS

Kubernetes

CI/CD

Job description

ALSO is seeking a Staff Security Engineer for Cloud to own security end-to-end for a connected, software-defined EV platform. You will design and build security in Go alongside the backend team, tackling threat modelling, IAM, TLS, and software supply chain security.

Lead architecture reviews and drive DevSecOps practices across AWS, Kubernetes, and microservices. You will harden containers, implement policy, and oversee incident response, with a focus on scalable security that enables