SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 167,000 - 230,000 / annual
Pronto AI is a global leader in commercializing autonomous vehicle technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. The company delivers production-ready autonomy already operating in the field and is building toward becoming the world's first profitable AV technology company.
As a Senior Software Engineer focused on Cloud & Platform Security, you will work directly with the Infrastructure team to secure the systems that manage and control the fleet. Rather than duplicating the team's existing cloud and Kubernetes ownership, you will bring deep security expertise across identity, secrets, network segmentation, and the fleet-management and remote-vehicle-control APIs that represent some of the highest-impact systems in the environment.
Key responsibilities include:
- Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
- Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
- Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
- Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
- Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
- Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.
The role is based in the San Francisco office with five-day-per-week onsite work. You will work as a hands-on security engineer embedded as a partner to an experienced Infrastructure team, influencing technical decisions and helping engineers build secure systems without operating as a gatekeeper.
**Requirements:**
- 5+ years of experience in cloud, infrastructure, or platform security.
- Hands-on experience working with production Kubernetes environments.
- Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
- Experience designing or reviewing both coarse-grained and fine-grained authorization models.
- Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
- Experience managing or securing non-human identities and service-to-service access.
- Strong understanding of network segmentation and access boundaries in cloud environments.
- Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.
**Nice to have:**
- Experience securing real-time or low-latency control-plane systems.
- Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.
