Security Engineer II, Cloud & Platform Security

Nscale • Houston, NY

5d

About The Position

Nscale is hiring a Security Engineer II for its Cloud & Platform Security team within the CISO organization. The role helps protect Nscale’s cloud platforms, hyperscale GPU clusters, and production environments through hands-on cloud security, detection, and response work. The engineer investigates security findings and incidents, distinguishes meaningful risk from noise, and partners with engineering teams to address underlying causes.

The position reviews cloud posture and security findings, triages production threats, improves security telemetry, and turns incident lessons into lasting improvements in controls and coverage. It also involves cloud, Kubernetes, host, container, and production-service investigations; reliable security logging and SIEM pipelines; and detailed investigation records for audit and compliance purposes.

Nscale describes its environment as collaborative, supportive, innovative, and flexible. The position offers a highly competitive US compensation package consisting of base salary, bonus, and equity, with performance reviews every 12 months. The listed base salary range is $130,000–$160,000 USD; actual compensation may vary based on job-related factors. The role may also be eligible for bonus, equity, and/or commission programs, and Nscale may offer medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

Requirements

• 2–5 years of security experience, including hands-on work in security operations, cloud security, detection and response, or incident response and forensics.
• Practical experience triaging findings and alerts, with the judgment to distinguish real risk from noise.
• Working knowledge of cloud security and posture management in AWS, GCP, or Azure, including common infrastructure misconfigurations and exposures.
• Familiarity with logging, SIEM, and detection tooling, and with the telemetry needed to detect and investigate threats.
• Exposure to incident response and digital forensics, including timelines, evidence handling, and root-cause analysis, and eagerness to deepen that expertise.
• Comfort working with and investigating Kubernetes, containers, Linux, and APIs.
• Clear written communication, including findings, severity assessments, and actionable next steps for engineers and leadership.
• Collaborative approach and ownership of findings through resolution, working with engineering to fix root causes.

Nice To Haves

• Experience with GPU/HPC or large-scale multi-tenant cloud infrastructure.
• Python, Go, or Bash scripting and automation to reduce repetitive work and scale investigations.
• Exposure to CSPM tooling, cloud-native detection, container/Kubernetes security, and identity and access management.
• Relevant certifications such as GCIH, GCFA, GCIA, or cloud security certifications; these are welcome but not required.

Responsibilities

• Review CSPM and other cloud-security findings across cloud platforms and GPU infrastructure; validate findings against live environments, assess technical and business impact, and assign severity.
• Partner with platform, infrastructure, and engineering teams to remediate findings and track them through closure.
• Identify recurring misconfigurations and exposure patterns, address systemic causes, and establish secure-by-design guardrails.
• Triage production security alerts and threats, assess urgency and potential blast radius, and classify, enrich, and escalate cases into incident response when warranted.
• Involve system owners to understand architecture and impact, and document observations, decisions, and rationale.
• Feed lessons from alerts and incidents into detections and runbooks.
• Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services; identify missing sources, fields, or retention and work with teams to close gaps.
• Help ensure security-relevant telemetry reaches logging and SIEM pipelines reliably and supports detection and investigation.
• Contribute to detections and alerting, prioritising signal quality over volume.
• Reconstruct incidents, establish scope and impact, and determine whether findings are exploited, exploitable, or false alarms.
• Perform host, container, and cloud forensics using timelines, artefacts, and evidence to support incident response and root-cause analysis.
• Contribute to blameless post-incident reviews and translate lessons into stronger controls, better coverage, and improved processes.
• Maintain detailed investigation and resolution records for audit and compliance purposes.

Benefits

• Highly competitive US compensation package with base salary, bonus, and equity.
• Performance reviews every 12 months.
• Flexible workplace and autonomy to shape the workday.
• Potential eligibility for bonus, equity, and/or commission programs.
• Potential benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.
• Progression plan tailored to individual ambitions and support for developing detection, response, and forensics expertise.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed