Staff Security Engineer, Cloud Security

Attentive

4d•$179,000 - $264,000

About The Position

Attentive is seeking a Staff Security Engineer focused on Cloud Security to enhance the protection of its cloud infrastructure, applications, data, and engineering systems. This is a hands-on role with significant impact, requiring close collaboration with Security, Infrastructure, Platform, SRE, and Engineering teams. The successful candidate will identify cloud risks, improve architecture, and develop scalable security controls. At the Staff level, this role involves looking beyond individual findings to identify broader risks, establish technical direction, and guide teams towards practical security enhancements.

Requirements

8+ years of experience in security, infrastructure, or related engineering roles, with strong experience in AWS and cloud-native environments.
Strong understanding of cloud security, including identity, access, networking, workload security, encryption, secrets, logging, monitoring, and data protection.
Experience designing and operating security controls in a major cloud platform.
Strong knowledge of cloud identity and access management, including least privilege, workload identity, privileged access, and service-to-service access.
Experience securing containers and Kubernetes, including workload identity, image security, secrets, networking, and runtime controls.
Experience with infrastructure-as-code (e.g., Terraform) and CI/CD, with the ability to automate security checks and controls in engineering workflows.
Ability to review complex systems and identify broader security risks that may not be clear from individual findings.
Experience using cloud security, vulnerability, posture management, or detection tools while applying judgment beyond the severity shown by the tool.
Ability to explain technical issues as realistic attack paths, business impact, and clear remediation priorities.
Good engineering judgment and the ability to balance security, reliability, developer experience, and business needs.
Experience leading technical work and influencing engineers and leaders without direct authority.
Strong written and verbal communication skills with both technical and non-technical audiences.

Responsibilities

Own and improve Attentive’s cloud security strategy and roadmap, with a focus on the risks that matter most.
Design and improve cloud security controls across identity and access, networking, workload security, data protection, secrets, logging, monitoring, and vulnerability management.
Work with engineering teams to build security into cloud architecture, infrastructure-as-code, CI/CD pipelines, containers, Kubernetes, and cloud services.
Improve cloud identity and access controls, including least privilege, privileged access, workload identity, and trust between services and environments.
Improve the security of software delivery and cloud infrastructure, including how systems are built, deployed, changed, and accessed.
Create reusable security patterns, standards, and automated guardrails that make it easier for teams to build securely.
Identify and prioritize broader cloud risks by connecting vulnerabilities, misconfigurations, access paths, and architecture decisions to realistic business impact.
Help teams fix complex security issues by explaining the risk clearly, recommending practical solutions, and helping set priorities.
Provide security guidance for new systems and major projects so security is considered early in the design process.
Improve cloud security monitoring and visibility so important events and suspicious activity can be found and investigated.
Support cloud security incidents by helping understand what happened, what was affected, and what needs to change.
Evaluate cloud security tools and capabilities and help decide when Attentive should build, automate, configure, or buy a solution.
Define useful cloud security metrics so Security and Engineering leaders can understand risk, progress, and areas that need attention.
Support and guide other engineers through design reviews, technical advice, documentation, and shared security patterns.