What You’ll Do

We’re looking for a Staff Cloud Security Engineer to help lead the security of our cloud platform. You’ll design, build, and operate the controls that protect our infrastructure end to end — so the enterprise marketers who rely on Typeface can move fast with confidence that their brands, content, and data are safe.

This is your chance to shape how a fast-growing AI company secures the cloud — not just by finding risks, but by building secure-by-default systems, guardrails, and automation that let every team ship faster and safer.

How You’ll Make an Impact:

• Lead the design and implementation of security architecture across our cloud environments – from identity and networking to data protection and workload security
• Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks
• Own identity and access management, applying least-privilege principles across accounts, services, and users
• Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution
• Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001
• Partner with incident response to investigate and remediate cloud security events
• Mentor and support teammates, helping to shape a strong, security-first engineering culture

What You Bring:

• 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale
• Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
• Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services
• Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)
• Strong understanding of IAM, network security, encryption, key management, and secrets management
• Scripting or programming skills (Python, Go, or Bash) to automate security controls
• Excellent communication skills and the ability to thrive independently and in collaborative teams
• Experience supporting B2B or enterprise SaaS products
• Bonus: Background securing AI or generative AI systems
• Bonus: Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP

Location

This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.

Base Salary

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.