SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 179,000 - 255,000 / annual
Scribd is seeking a Staff Cloud Security Engineer to shape the technical direction of cloud security and drive complex architectural investments across AWS and GCP environments. This is a hands-on technical leadership role focused on protecting Scribd's applications and cloud infrastructure through a proactive, shift-left approach integrated throughout the software development lifecycle.
You will lead significant security initiatives and influence engineering teams to adopt security capabilities, balancing long-term architectural improvements with pressing security risks. Key responsibilities include:
**Set Cloud Security Architecture:** Strengthen and evolve security architecture and guardrails across AWS and GCP environments, including account and project configuration, network security, and infrastructure standards. Drive identity and access management improvements across cloud environments, emphasizing least privilege, just-in-time access, short-lived workload credentials, and secure cross-account access. Define and improve secrets management, data protection, and encryption standards with demonstrated control coverage.
**Secure Cloud Workloads and Delivery Paths:** Drive security architecture for cloud workloads including Kubernetes, secure base images, workload identity, runtime protection, and service isolation. Partner with infrastructure teams to secure cloud deployment paths, workload identities, registries, and CI/CD infrastructure. Build reusable security capabilities and paved paths using Terraform modules and policy-as-code guardrails to make secure configurations the default.
**Strengthen Cloud Visibility and Resilience:** Define cloud telemetry requirements and improve detection coverage for cloud-native threats. Validate cloud security controls through threat hunting and attack-path analysis. Contribute technical expertise during incidents and partner on containment and recovery architecture, translating learnings into durable improvements.
**Drive Cloud Security Strategy:** Shape and drive the Cloud Security technical roadmap using threat models, incidents, and control effectiveness to prioritize systemic risks. Lead complex technical initiatives, establish and evolve security standards, and influence their adoption across engineering teams. Provide technical guidance, mentorship, and proactive communication of risks and progress to stakeholders.
Scribd operates a flexible work model (Scribd Flex) with occasional in-person attendance required. The company supports a culture of real, bold work with meaningful community connection.
**Requirements:**
- 10+ years of experience with significant depth in cloud or infrastructure security engineering, or equivalent blend of software and security engineering, with hands-on experience securing production cloud environments at scale
- Deep expertise in at least one of AWS or GCP, with sufficient fluency in the other to reason about security risks
- Experience shaping security architecture and leading initiatives across team boundaries, influencing engineering teams to adopt security standards without formal authority
- Deep hands-on identity and access management expertise, including least-privilege access, cross-account access patterns, short-lived workload credentials (IRSA, OIDC federation), and service-to-service identity and authorization (mTLS, SPIFFE/SPIRE, service mesh identity models)
- Experience securing cloud workloads including Kubernetes, container security, runtime protection, and workload isolation
- Experience with cloud security posture management and workload protection, including CSPM/CNAPP platforms, evaluating security findings, identifying attack paths, and translating them into prioritized improvements
- Experience designing and implementing cloud security guardrails at scale, including account or project security baselines, policy-as-code (AWS SCPs or OPA), secure infrastructure provisioning, and landing zone automation
- Strong Infrastructure-as-Code and automation skills, including Terraform or equivalent tooling and proficiency in Python or Go
- Experience with cloud security visibility and response, including cloud-native security tooling (GuardDuty, Security Command Center, CloudTrail, Cloud Audit Logs), detection capabilities, SIEM integration, and applying incident learnings
- Track record of delivering measurable security improvements, balancing technical depth, architectural judgment, and hands-on execution
