Staff Cloud Security Engineer

Typeface • Palo Alto, CA

8d • $210,000 - $240,000 • Hybrid

About The Position

Typeface is seeking a Staff Cloud Security Engineer to lead security for its cloud platform. The role designs, builds, and operates end-to-end controls that protect the company’s infrastructure, brands, content, and data. The engineer will help shape cloud security at a fast-growing AI company by building secure-by-default systems, guardrails, and automation that enable teams to work safely and efficiently. This is a hybrid role based in Palo Alto, California, with in-office collaboration three days per week. The stated base salary range is $210,000–$240,000, plus equity; actual compensation may vary based on level, experience, and skillset.

Requirements

• 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale.
• Bachelor’s or Master’s degree in computer science, cybersecurity, information systems, or a related field, or equivalent practical experience.
• Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.
• Experience with infrastructure as code tools such as Terraform, CloudFormation, or Bicep, and container security including Docker and Kubernetes.
• Strong understanding of IAM, network security, encryption, key management, and secrets management.
• Scripting or programming skills in Python, Go, or Bash to automate security controls.
• Excellent communication skills and ability to work independently and collaboratively.
• Experience supporting B2B or enterprise SaaS products.

Nice To Haves

• Background securing AI or generative AI systems.
• Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP.

Responsibilities

• Lead the design and implementation of security architecture across cloud environments, covering identity, networking, data protection, and workload security.
• Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks.
• Own identity and access management and apply least-privilege principles across accounts, services, and users.
• Secure containers, Kubernetes, and CI/CD pipelines, embedding security into engineering build and deployment processes.
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution.
• Collaborate with Engineering, Product, IT, and Compliance partners on security reviews, audits, and certifications such as SOC 2 and ISO 27001.
• Partner with incident response to investigate and remediate cloud security events.
• Mentor and support teammates and help shape a strong security-first engineering culture.

Benefits

• Competitive compensation, including salary, equity, and 401(k).
• Full medical, dental, and vision insurance for employees and their families.
• HSA and FSA options.
• Flexible time off, including parental leave.
• Well-being programs supporting mental and physical health.
• Daily lunch and snacks.
• Mentorship and the opportunity to work closely with AI leaders on products that ship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior