Staff Cloud Security Engineer - Go, Kubernetes & AWS

Doist; Palo Alto (CA); On-site; USD 205,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Dental & Vision coverage

401(k) matching

Fertility and family benefits

Flexible time off

Job summary

ALSO is seeking a Staff Security Engineer for Cloud to own security end to end for a connected, software-defined EV platform. You will design security architecture and build it in Go alongside the backend team, ensuring cloud identity, access, and policy are enforced at scale.

You’ll lead threat modeling, container hardening, SBOM, CI/CD security, and incident response, while securing vehicle-to-cloud boundaries and overseeing penetration testing and vulnerability management.

Qualifications

• 10+ years in backend and infrastructure engineering with security in production.
• Expert hands-on AWS: IAM, VPC, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config, SCPs.
• Deep Kubernetes and container security with real production experience.
• Fluent Go development, able to design, review and ship production code.
• Experience with threat modeling, secure architecture reviews, and incident response.

Responsibilities

• Own cloud security end to end — strategy, architecture, implementation, and operations across AWS, Kubernetes, and microservices.
• Design and implement identity and access at scale, including mutual TLS and secrets management.
• Harden containers and orchestration with admission controls, runtime and network policy.
• Secure the software supply chain with SBOM, image scanning, and signed artifacts.
• Build authorization services and policy as code; enable DevSecOps across teams.
• Run detection and response with logging, alerting, runbooks, and on-call duties.
• Secure the vehicle-to-cloud boundary including device identity and OTA updates.
• Contribute to core backend work and own assurance including penetration tests and vulnerability management.

Skills

Security architecture

Go programming

AWS security

Kubernetes security

Threat modeling

CI/CD security

Incident response

Zero trust / least privilege

Education

Security engineering experience

Tools

AWS

Kubernetes

CI/CD tooling

Job description

ALSO is seeking a Staff Security Engineer for Cloud to own security end to end for a connected, software-defined EV platform. You will design security architecture and build it in Go alongside the backend team, ensuring cloud identity, access, and policy are enforced at scale.

You’ll lead threat modeling, container hardening, SBOM, CI/CD security, and incident response, while securing vehicle-to-cloud boundaries and overseeing penetration testing and vulnerability management.