Cloud Security Engineer

Traversal•New York, NY

3d•Onsite

About The Position

This is a Staff-level Security Engineer hire and the first person at Traversal to own application security and cloud security end-to-end. We’re looking for someone who can assess our current security posture, identify gaps, chart a roadmap, and implement fixes, tooling, and processes to make Traversal’s security best-in-class. You'll be working on a platform that ingests sensitive production data from enterprise customers across some of the world's most complex environments. What you build here becomes Traversal's security foundation as we scale toward a Series B and beyond. This is a hands-on engineering role with real ownership and organization-wide impact. It is not a policy role, a compliance role, or an advisory role.

Requirements

7+ years of hands-on security engineering with meaningful ownership of application or cloud security in production environments
You implement, not just advise — comfortable writing Terraform, configuring IAM policies, managing cloud environments and controls, and hardening Kubernetes clusters directly
Strong application security fundamentals — OWASP top 10 as a mental model, not a checklist; can apply it to novel and evolving attack surfaces
Experience driving cloud infrastructure changes to improve security posture and seeing them through to implementation
Has worked at a product company where customer data security was a core responsibility
Startup experience — comfortable operating without a fully built security program around you.

Nice To Haves

Can walk through a specific cloud infrastructure change they drove to improve security posture: what they found, what they changed, how they got it shipped
Has been the primary security owner at a company, or close to it
Has thought seriously about what securing an AI or agent system looks like

Responsibilities

Own Traversal's infrastructure and application security posture end-to-end — assess where we are, define what good looks like, and implement the changes yourself
Identify and remediate vulnerabilities across our cloud infrastructure, application layer, and customer-facing integrations — through code, not just recommendations
Implement and maintain IAM policies, S3 configurations, Kubernetes security controls, and Terraform-managed infrastructure changes
Build and enforce security standards for new features, API integrations, and customer environment access
Own secrets management, JIT access, and identity architecture
Drive security improvements across engineering — working directly with platform, backend, and AI teams to get changes shipped
Secure our AI and agent layer — Traversal's agents ingest sensitive production observability data; you'll define what secure looks like in that context
Support enterprise customer security reviews and compliance requirements (SOC 2 and beyond)