SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 210,000 - 240,000 / annual
Typeface is an AI-powered marketing orchestration platform backed by Microsoft, GV, Salesforce Ventures, Lightspeed, Madrona, and Menlo. The company helps enterprise brands move from brief to fully personalized campaigns in days instead of months.
You will lead the security of Typeface's cloud platform as a Staff Cloud Security Engineer. This role involves designing, building, and operating security controls that protect the infrastructure end-to-end, enabling enterprise marketers to move fast with confidence that their brands, content, and data are secure.
Key responsibilities include:
- Lead the design and implementation of security architecture across cloud environments (identity, networking, data protection, workload security)
- Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks
- Own identity and access management, applying least-privilege principles across accounts, services, and users
- Secure containers, Kubernetes, and CI/CD pipelines, embedding security into the build and deployment process
- Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive resolution
- Collaborate with Engineering, Product, IT, and Compliance on security reviews, audits, and certifications (SOC 2, ISO 27001)
- Partner with incident response to investigate and remediate cloud security events
- Mentor teammates and help shape a security-first engineering culture
This is a hybrid role based in Palo Alto, requiring in-office collaboration 3 days per week.
Requirements:
- 10+ years of experience in cloud security, security engineering, or infrastructure engineering with a strong track record securing production environments at scale
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent practical experience)
- Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services
- Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)
- Strong understanding of IAM, network security, encryption, key management, and secrets management
- Scripting or programming skills (Python, Go, or Bash) to automate security controls
- Excellent communication skills and ability to thrive independently and in collaborative teams
- Experience supporting B2B or enterprise SaaS products
- Bonus: Background securing AI or generative AI systems
- Bonus: Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP
