SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Tessera Labs is hiring a Senior Cloud Security Engineer to design and build security controls, automation, and detection across multi-cloud environments (AWS, GCP, Azure). This role takes a DevOps-first approach: you'll write code, ship changes through standard engineering pipelines, and build security patterns that teams want to adopt rather than enforce top-down.
Key responsibilities include:
- Owning the security posture of cloud environments across AWS, GCP, and Azure with consistent controls
- Designing secure reference architectures and reusable patterns (account structure, network segmentation, encryption, secrets management)
- Building security into Infrastructure as Code through hardened modules, policy-as-code, and pre-deploy checks
- Securing CI/CD pipelines and the software supply chain (pipeline permissions, secrets handling, artifact integrity, workload identity)
- Designing and enforcing least-privilege IAM across clouds, including federation and access reviews
- Writing code and scripts to automate security controls, remediation, and evidence collection
- Operating Cloud Security Posture Management (CSPM) tools and driving findings to remediation
- Building logging and detection for cloud control-plane and workload activity; leading cloud incident response
- Contributing security controls and evidence to compliance programs (SOC 2, ISO 27001)
You'll partner closely with platform and infrastructure engineering, customer support, delivery teams, IT, and compliance.
REQUIREMENTS:
- DevOps foundation: prior experience in DevOps, SRE, or platform engineering roles with hands-on production infrastructure and CI/CD pipeline building and operation
- Hands-on production experience securing at least two major cloud providers (AWS, GCP, or Azure) with clear understanding of their identity, networking, and logging models
- Deep knowledge of cloud security best practices (CIS Benchmarks, provider security foundations guidance) with pragmatic judgment in application
- Fluency in proven cloud security patterns: least-privilege IAM and workload identity, network segmentation, encryption and key management, secrets management, centralized logging, preventive guardrails (e.g., AWS Service Control Policies, GCP Organization Policies)
- Strong coding and scripting skills in at least one general-purpose language (Python, Go) plus shell scripting; ability to write maintainable automation
- Hands-on experience with Infrastructure as Code (Terraform, OpenTofu) and embedding security checks into it
- Strong communication skills to work directly with engineers and explain risk in actionable terms
NICE TO HAVE:
- Familiarity with open-source cloud security tools (Prowler, Checkov, Trivy, Open Policy Agent, Falco)
- Container and Kubernetes security experience (EKS, GKE, AKS) including admission control and runtime policy
- Relevant cloud security certification (AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, CCSP)
- Experience securing SaaS and developer platforms (identity providers, GitHub organizations)
- Experience supporting SOC 2, ISO 27001, or similar compliance programs
- Hands-on cloud incident response or forensics experience
