RemoteLeaf Logo
Log in Sign up

Staff Cloud Security Engineer

3 months ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
AWS Azure Envoy GCP Go gRPC HashiCorp Vault Kubernetes Microservices Penetration Testing Python Secrets Management
Apply Now
Temporal

Temporal

Temporal provides an open source durable execution platform that enables developers to create resilient applications capable of maintaining successful operations despite failures, network issues, and other disruptions.

Internet Software & Services
51-250
Founded 2019
$128M raised
View All Jobs 11

Description

  • Collaborate with product and engineering teams to integrate security into the design and architecture of cloud infrastructure across AWS, GCP, Azure, and other clouds.
  • Secure core platform components, including the workflow engine, task queue architecture, and worker execution model.
  • Conduct threat modeling and risk assessments to identify vulnerabilities and attack vectors across the multi-cloud environment.
  • Secure the gRPC communication layer, including mTLS certificate management, service mesh configuration, and API authentication.
  • Manage cloud security posture using tools such as Wiz, including misconfiguration detection, compliance monitoring, and remediation.
  • Translate cloud security standards such as CSA Cloud Controls Matrix and CIS Benchmarks into actionable internal policy.
  • Partner with infrastructure and software engineering teams to enable secure shipping across the organization.
  • Participate in the on-call rotation.
  • Help shape how AI is used responsibly in infrastructure and engineering processes.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
  • 5+ years of experience in cloud security or a related role.
  • Experience partnering with engineering teams on infrastructure access and security posture.
  • Kubernetes security posture management and auditing experience, including workload hardening, RBAC design, and admission control.
  • Experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.
  • Strong opinions on the use of AI in security assessments, threat models, penetration testing, and related workflows.
  • Deep understanding of application architecture and design principles, with the ability to identify vulnerabilities across multiple programming languages.
  • Experience with secrets management at scale, such as HashiCorp Vault or AWS Secrets Manager, and payload encryption patterns such as codec servers.
  • Proficiency in Go and familiarity with Python; Go is Temporal's primary server and SDK language.
  • Strong command of gRPC security, mTLS, and service mesh architectures such as Istio and Envoy.
  • Excellent communication skills and the ability to explain complex security concepts to non-technical stakeholders.
  • Experience with Temporal, Cadence, or similar workflow orchestration platforms, including workflow history, replay semantics, and scheduling internals (nice to have).
  • FedRAMP, SOC 2 Type II, or ISO 27001 experience, especially in cloud-native SaaS environments (nice to have).
  • Experience with open source automation or automation projects (nice to have).
  • Additional expertise in AppSec, CorpSec, or GRC (nice to have).
  • Security conference talks or published research (nice to have).

Benefits

  • Estimated base pay of $225,000 - $275,000, depending on qualifications and location.
  • Eligible to participate in Temporal's equity plan.
  • Unlimited PTO, plus 12 holidays and 2 floating holidays for U.S. employees.
  • 100% employer-paid medical, dental, and vision premiums for U.S. employees.
  • AD&D, short-term disability, long-term disability, and life insurance options.
  • Empower 401(k) plan.
  • Learning and development, professional memberships, lifestyle spending, in-home office setup, WFH meals, and internet stipend perks.
  • Calm app access for mental wellness, plus international employee perks that vary by country.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

TherapyNotes

Cloud Security Engineer

TherapyNotes 51-250 Health Care Providers & Services

TherapyNotes is hiring a hands-on Cloud Security Engineer to protect its Azure-focused cloud infrastructure, Kubernetes workloads, and infrastructure-as-code pipelines within a HIPAA- and HITRUST-regulated behavioral health software environment.

United States Full-time Senior Security Engineer
$110k-$150k
Argo CD AWS Azure CI/CD Flux GitOps Kubernetes Linux Network Security Secrets Management SIEM Terraform
20 hours, 42 minutes ago
Coalfire

Senior SIEM Engineer

Coalfire 251-1K Internet Software & Services

Coalfire is hiring a SIEM Platform Engineer to design, operate, and continuously improve reliable, scalable SIEM capabilities supporting managed cybersecurity and compliance services across cloud and high-compliance environments.

United States Full-time Senior Security Engineer
$85k-$141k
Agile Ansible AWS Azure CI/CD Cybersecurity Elasticsearch GitHub GitHub Actions GitLab Network Security Python SIEM Splunk Terraform
1 day, 20 hours ago
SkySlope

Security Engineering Manager

SkySlope 251-1K Internet Software & Services

SkySlope is hiring a Security Engineering Manager to build and lead its security engineering function, establishing a modern security program and delivering measurable risk reduction across the company’s real estate technology platform.

United States Full-time Lead Security Engineer
$180k-$200k
AWS Azure Secrets Management
1 day, 20 hours ago
Mom's Meals

Chief Information Security Officer (CISO)

Mom's Meals 251-1K Family Services

Mom’s Meals is seeking a Chief Information Security Officer and Vice President of IT Infrastructure, Support & Security to lead enterprise cybersecurity, cloud infrastructure, IT operations, support, compliance, and resilience across the organization.

United States Full-time Executive Infrastructure Engineer Security Engineer
Azure Cybersecurity HIPAA Penetration Testing SOC
1 day, 20 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers