Senior Cloud Security Engineer

About this role

SENIOR CLOUD SECURITY ENGINEER At Anyscale https://www.anyscale.com/, we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray https://docs.ray.io/en/latest/, a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI https://thenewstack.io/how-ray-a-distributed-ai-framework-helps-power-chatgpt/, Uber https://www.uber.com/blog/horovod-ray/, Spotify https://engineering.atspotify.com/2023/02/unleashing-ml-innovation-at-spotify-with-ray/, Instacart https://www.youtube.com/watch?v=3t26ucTy0Rs&list=PLzTswPQNepXmLUiL4F_1VHrPcCz1OeILw&index=23&pp=iAQB, Cruise https://www.youtube.com/watch?v=gj0BqvfX_wI&list=PLzTswPQNepXmLUiL4F_1VHrPcCz1OeILw&index=46&pp=iAQB, and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world. With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert. Proud to be backed by Andreessen Horowitz, NEA, and Addition https://www.wsj.com/articles/ai-startup-anyscale-adds-99-million-to-andressen-horowitz-led-funding-round-11661254200 with $250+ million raised to date. ABOUT THE ROLE Anyscale's security needs are growing as we operate more production and cloud infrastructure for larger and more demanding customers. We're looking for a Senior Cloud Security Engineer to own the security of that infrastructure. This is a hands-on, high-ownership role: you will own how our production and cloud environments are hardened, isolated, and monitored. You will set and drive the direction for infrastructure and production security, reporting to the Head of Security and partnering closely with the wider engineering organization. This role is based in the San Francisco, Bay Area. In your first year, success looks like hardened and well-segmented production environments, strong runtime security coverage across our container footprint, and a clear, defensible story for how we secure the infrastructure our customers rely on. WHAT YOU'LL DO - Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation. - Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity. - Partner with engineering on secure infrastructure architecture and the secure design of our production environments. - Own cloud security posture management end to end: triage, prioritization, and driving remediation with the teams that own the resources. - Define and drive cloud infrastructure security standards: baseline configurations, infrastructure-as-code security, and key and secrets management. - Drive fine-grained, role-based access to production, in partnership with engineering and IT. - Feed infrastructure findings into vulnerability management and risk reporting. WHAT YOU'LL BRING - 8+ years in security engineering, with a deep focus on cloud and infrastructure security, ideally at a high-growth startup. - Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes). - Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments. - Experience with CSPM and runtime security tooling, and the judgment to turn findings into prioritized, actioned work. - The ability to own cloud infrastructure security independently, set its direction, and make sound tradeoffs across teams. - Fluency working directly with engineers on architecture and remediation, not just producing findings. NICE TO HAVE - Experience securing multi-tenant production systems or environments that run customer workloads. - Familiarity with Upwind or similar CSPM and runtime platforms. - Experience contributing to SOC 2 or ISO 27001 evidence from the infrastructure side. - Background in AI or ML platforms or distributed systems.