SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 147,000 - 255,000 / annual
Scribd, Inc. is seeking a Staff Cloud Security Engineer to help shape the technical direction of cloud security and drive complex architectural investments across AWS and GCP environments. This is a hands-on technical leadership role where you'll work closely with engineers to strengthen identity models, establish secure-by-default guardrails, and protect cloud workloads.
Key responsibilities include:
**Set Cloud Security Architecture:** Strengthen and evolve security architecture across AWS and GCP environments, including account/project configuration, network security, and infrastructure standards. Drive least-privilege identity and access management, just-in-time access, short-lived workload credentials, and secure cross-account access patterns. Define and improve secrets management, data protection, and encryption standards with measurable control coverage.
**Secure Cloud Workloads and Delivery Paths:** Design security architecture for cloud workloads including Kubernetes, secure base images, workload identity, runtime protection, and service isolation. Partner with infrastructure teams to secure deployment paths, workload identities, registries, and CI/CD infrastructure. Build reusable security capabilities using Terraform modules and policy-as-code guardrails that make secure configurations the default.
**Strengthen Cloud Visibility and Resilience:** Define cloud telemetry requirements and improve detection coverage for cloud-native threats. Validate controls through threat hunting and attack-path analysis. Contribute technical expertise during incidents and translate learnings into durable improvements.
**Drive Cloud Security Strategy:** Shape the Cloud Security technical roadmap using threat models, incidents, and control effectiveness to prioritize systemic risks. Lead complex technical initiatives, establish security standards, and influence adoption across engineering teams. Provide technical guidance, mentor engineers, and communicate risks and progress to stakeholders.
Scribd operates a flexible work model (Scribd Flex) with occasional in-person attendance required. The company values a culture of GRIT: setting and achieving Goals, delivering Results, contributing Innovative ideas, and strengthening the Team through collaboration.
**Requirements:**
- 10+ years of experience with significant depth in cloud or infrastructure security engineering, or equivalent blend of software and security engineering
- Hands-on experience securing production cloud environments at scale
- Deep expertise in at least one of AWS or GCP, with fluency in the other
- Experience shaping security architecture and leading initiatives across team boundaries without formal authority
- Deep hands-on identity and access management expertise: least-privilege access, cross-account patterns, short-lived workload credentials (IRSA, OIDC federation), service-to-service identity (mTLS, SPIFFE/SPIRE, service mesh)
- Experience securing cloud workloads: Kubernetes, container security, runtime protection, workload isolation
- Experience with cloud security posture management and workload protection (CSPM/CNAPP platforms, attack-path analysis)
- Experience designing and implementing cloud security guardrails at scale: account/project baselines, policy-as-code (AWS SCPs, OPA), secure infrastructure provisioning, landing zone automation
- Strong Infrastructure-as-Code and automation skills: Terraform or equivalent, proficiency in Python or Go
- Experience with cloud security visibility and response: cloud-native tooling (GuardDuty, Security Command Center, CloudTrail, Cloud Audit Logs), detection capabilities, SIEM integration
- Track record of delivering measurable security improvements, balancing technical depth, architectural judgment, and hands-on execution
