Senior Security Engineer - Cloud Security

📋 Description

• Harden PagerDuty's AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP
• Harden EKS clusters and the Istio service mesh against the CIS Kubernetes Benchmark, DISA
• Design and enforce Kubernetes RBAC, least-privilege workload identity, and container supply-chain
• Own PKI and encryption standards across the environment — certificate lifecycle and management
• Design and roll out Service Control Policy (SCP) guardrails and least-privilege IAM/PAM across
• Lean into AI to unlock efficiency and velocity — consume agentic tooling in day-to-day work and

🎯 Requirements

• 5+ years as a Security Engineer in an AWS-native, microservice SaaS environment, with a strong
• Deep, hands-on expertise securing Kubernetes and containerized environments — EKS, RBAC, Kubernetes
• Container runtime and image security experience; familiarity with a service mesh such as Istio
• Strong, hands-on expertise in PKI and cryptography — certificate lifecycle/management, TLS/mTLS
• Deep, hands-on expertise with AWS security services, including but not limited to: IAM family
• Ability to inform and drive detection strategy within your domains — comfortable authoring and

🎁 Benefits

• Competitive salary
• Comprehensive benefits package
• Flexible work arrangements
• Company equity (eligibility varies)
• ESPP (Employee Stock Purchase Program) (eligibility varies)
• Retirement or pension plan (eligibility varies)