Security Engineer II, Product & Platform Security

Nscale • Seattle, WA

6d • $130,000 - $160,000

About The Position

Help protect Nscale's cloud platforms, hyperscale GPU clusters, and production environments as a hands-on member of the Product & Platform Security team within the CISO organisation. The role investigates security findings and incidents, distinguishes meaningful risk from noise, and works with engineering teams to address underlying causes.

The position focuses on cloud security, detection, and response. It includes reviewing cloud posture, triaging production threats, improving telemetry for investigations, and turning incident findings into lasting improvements in controls and coverage. The role also contributes to audit and compliance through detailed investigation and resolution records, and supports blameless post-incident reviews and improved security processes.

Success is measured by the time needed to validate, prioritise, and resolve findings and alerts; reductions in recurring misconfigurations and exposure types; telemetry coverage across critical systems; and the quality and timeliness of investigations and post-incident improvements.

Requirements

• 2–5 years of security experience, with hands-on work in security operations, cloud security, detection and response, or incident response and forensics.
• Practical experience triaging findings and alerts, with the judgement to distinguish real risk from noise.
• Working knowledge of cloud security and posture management in AWS, GCP, or Azure, including common infrastructure misconfigurations and exposures.
• Familiarity with logging, SIEM, and detection tooling, and the telemetry needed to detect and investigate threats.
• Exposure to incident response and digital forensics, including timelines, evidence handling, and root-cause analysis; eagerness to deepen that expertise.
• Comfort working with and investigating Kubernetes, containers, Linux, and APIs.
• Clear written communication for findings, severity assessments, and actionable next steps for engineers and leadership.
• Collaborative approach and ownership of findings through resolution, working with engineering to fix root causes.

Nice To Haves

• Experience with GPU/HPC or large-scale multi-tenant cloud infrastructure.
• Python, Go, or Bash scripting and automation to reduce repetitive work and scale investigations.
• Exposure to CSPM tooling, cloud-native detection, container/Kubernetes security, and identity and access management.
• Relevant certifications such as GCIH, GCFA, GCIA, or cloud security certifications; these are welcome but not required.

Responsibilities

• Review cloud security posture management (CSPM) and other cloud-security findings across cloud platforms and GPU infrastructure.
• Validate findings against live environments, assess technical and business impact, and assign severity.
• Partner with platform, infrastructure, and engineering teams to remediate findings and track them to closure.
• Identify recurring misconfigurations and exposure patterns, address systemic causes, and establish secure-by-design guardrails.
• Triage production security alerts and threats, assessing their validity, urgency, and potential blast radius.
• Classify, enrich, and escalate alerts to incident response when warranted, involving system owners to understand architecture and impact.
• Record observations, decisions, and rationale clearly.
• Use lessons from incidents to improve detections and runbooks.
• Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services.
• Identify missing telemetry sources, fields, or retention, and work with platform and engineering teams to close coverage gaps.
• Help ensure security-relevant telemetry reliably reaches logging and SIEM pipelines and supports detection and investigation.
• Contribute to detections and alerting, prioritising signal quality over volume.
• Reconstruct incidents, establish scope and impact, and determine whether findings are exploited, exploitable, or false alarms.
• Perform host, container, and cloud forensics using timelines, artefacts, and evidence to support incident response and root-cause analysis.
• Contribute to blameless post-incident reviews and translate lessons into stronger controls, better coverage, and improved processes.
• Maintain detailed investigation and resolution records for audit and compliance purposes.

Benefits

• Highly competitive US compensation package including base salary, bonus, and equity; performance reviews every 12 months.
• Flexible workplace with autonomy to shape the workday.
• Potential eligibility for bonus, equity, and/or commission programs.
• Potential competitive benefits package including medical, dental, and vision coverage, flexible paid time off, parental leave, and retirement plan participation.
• Dynamic progression plan tailored to individual ambitions, with support for professional growth and development of detection, response, and forensics expertise.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed