Staff Cloud Security Engineer

🕒 2 days ago

🇺🇸 United States – Remote

💵 $225k - $275k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Temporal Technologies

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

☁️ SaaS

💰 $75M Series B on 2023-02

Software • SaaS • Cloud Computing

Temporal Technologies is a company that provides a platform for durable execution, helping developers build resilient applications by managing failures, network outages, and long-running processes. Their technology abstracts away the complexity of building scalable distributed systems, allowing developers to focus on delivering reliable systems faster. Temporal simplifies code by eliminating recovery logic, callbacks, and timers, making software more durable and fault tolerant. The platform supports a wide variety of applications, from transaction processing to applied AI, and is favored by developers for its ease of use and reliability. Temporal is open-source and offers both self-hosted and managed cloud services in multiple regions, enabling scalable, serverless application development.

📋 Description

• Collaborate with product and engineering teams to integrate security principles into the design and architecture of cloud infrastructure across multiple clouds (AWS, GCP, Azure, and others). • Secure Temporal's core platform components, including the workflow engine, task queue architecture, and worker execution model - identifying attack surfaces unique to durable, stateful distributed systems. • Conduct threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across our multi-cloud environment, with particular focus on workflow execution, task queue integrity, and client-server trust boundaries. • Secure Temporal's gRPC-based communication layer, including mTLS certificate management, service mesh configuration, and API authentication. • Manage cloud security posture using tools such as Wiz, including misconfiguration detection, compliance monitoring, and remediation across all three cloud providers. • Stay current on emerging cloud security standards and guidance (e.g. CSA Cloud Controls Matrix, CIS Benchmarks) and translate these into actionable internal policy. • Able to participate in on-call rotation.

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience). • 5+ years in cloud security or a related role. • Proven partnership with engineering teams, bringing security expertise to infrastructure access and security posture. • Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control. • Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention. • Strong opinions on the use of AI in different areas (assessments, threat models, penetration testing, etc). • A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages • Experience with secrets management at scale (e.g. HashiCorp Vault, AWS Secrets Manager) and payload encryption patterns such as codec servers for protecting sensitive workflow data. • Proficiency in Go; familiarity with Python. Go is Temporal's primary server and SDK language. • Strong command of gRPC security, mTLS, and service mesh architectures (Istio, Envoy). • Excellent communication and ability to explain complex security concepts to non-technical stakeholders. • Excellent collaboration and communication skills.

🏖️ Benefits

• Unlimited PTO, 12 Holidays + 2 Floating Holidays • 100% Premiums Coverage for Medical, Dental, and Vision • AD&D, LT & ST Disability, and Life Insurance (Standard & Supplemental Available) • Empower 401K Plan • Additional Perks for Learning & Development, Lifestyle Spending, In-Home Office Setup, Professional Memberships, WFH Meals, Internet Stipend and more!