SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 210,000 - 240,000 / annual
Typeface is an AI-powered marketing orchestration platform trusted by Fortune 100 companies, backed by Microsoft, GV, Salesforce, Lightspeed, Madrona, and Menlo. The company helps enterprises move from brief to fully personalized campaigns in days rather than months.
You will lead the security of Typeface's cloud platform as a Staff Cloud Security Engineer. Your responsibilities include designing, building, and operating controls that protect infrastructure end-to-end, enabling enterprise marketers to move fast with confidence that their brands, content, and data are secure.
Key responsibilities:
- Lead the design and implementation of security architecture across cloud environments, including identity, networking, data protection, and workload security
- Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks
- Own identity and access management, applying least-privilege principles across accounts, services, and users
- Secure containers, Kubernetes, and CI/CD pipelines, embedding security into development and deployment processes
- Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive resolution
- Collaborate with Engineering, Product, IT, and Compliance on security reviews, audits, and certifications (SOC 2, ISO 27001)
- Partner with incident response to investigate and remediate cloud security events
- Mentor teammates and help shape a security-first engineering culture
This is a hybrid role based in Palo Alto, requiring in-office collaboration 3 days per week.
Requirements:
- 10+ years of experience in cloud security, security engineering, or infrastructure engineering with a proven track record securing production environments at scale
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent practical experience)
- Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services
- Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)
- Strong understanding of IAM, network security, encryption, key management, and secrets management
- Scripting or programming skills (Python, Go, or Bash) to automate security controls
- Excellent communication skills and ability to work independently and collaboratively
- Experience supporting B2B or enterprise SaaS products
- Bonus: Background securing AI or generative AI systems
- Bonus: Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP
