Senior Cloud Security Engineer

BackOps-AI•San Francisco, CA

12d•Hybrid

About The Position

BackOps AI is transforming supply chain operations with agentic AI solutions that automate complex workflows, freeing operations teams to focus on what matters most. Headquartered in the San Francisco Bay Area with flexible remote-friendly options, we foster a culture of innovation, ownership, and measurable impact. As a Cloud Security Engineer, you will lead the technical design and implementation of security controls across our cloud infrastructure and platform. You will work at the intersection of engineering and DevOps to build resilient architectures, automate security guardrails, and secure our cloud-native services. This is a hands-on technical role for someone who can drive DevSecOps practices and take direct ownership of our security posture in a fast-paced AI environment. In this role, you will be the primary technical owner for cloud security, focusing on infrastructure hardening, container security, and automated response. While you will support our compliance goals, your core mission is building and maintaining the technical safeguards that protect our platform and customer data.

Requirements

5+ years in cloud security engineering, infrastructure security, or DevSecOps within a modern SaaS environment
Deep technical proficiency in AWS and/or GCP, including networking, IAM, and managed services
Proven experience with Infrastructure as Code (Terraform/CloudFormation) and automating security within CI/CD pipelines
Strong understanding of securing containerized workloads and orchestration platforms like Kubernetes (EKS/GKE)
Strong judgment in identifying material risks, prioritizing remediation, and balancing speed with practical security outcomes
Can write clear policies, standards, procedures, risk summaries, and customer-facing responses; able to work effectively across technical and non-technical teams
Organized, hands-on, and able to independently drive programs from requirement to implementation to review
Comfortable operating in a fast-moving environment where you may define structure while also doing the work directly
Strong coding skills in Python, Go, or a similar language to automate security tasks and interact with cloud APIs.

Nice To Haves

Experience with Vanta, Drata, or similar compliance automation tooling
Experience supporting SOC 2 Type I/II, SOC 3, ISO 27001 certification, or similar audits end-to-end
Familiarity with cloud environments such as AWS and/or GCP
Experience with vendor risk management, security questionnaires, and enterprise customer diligence workflows
Familiarity with privacy operations and data governance practices in B2B SaaS environments
Experience with security awareness programs, endpoint/device management, or identity lifecycle management
Exposure to secure SDLC, application security reviews, or vulnerability management programs
Experience working in AI, automation, or operationally sensitive product environments

Responsibilities

Design, build, and maintain robust cloud security controls across AWS/GCP infrastructure, Kubernetes, and serverless environments
Architect and implement fine-grained IAM policies, least privilege access models, and automated secrets management to minimize the attack surface
Develop and integrate automated security scanning and guardrails into CI/CD pipelines (SAST, DAST, and container vulnerability scanning)
Lead network security hardening, including VPC architecture, security groups, and cloud-native monitoring/alerting strategies
Operationalize vulnerability management and threat modeling for cloud-native applications and AI-driven workflows
Partner with engineering teams on secure development practices and provide technical guidance for securing complex AI agent architectures