Senior Cloud Security Engineer
at Yext · 1001-5000 employees
Debt Financing · $200M · May 2025
- Seniority
- Senior
- Location
- Hyderabad, India
- Posted
- 5d ago
pythongoawsgcpkubernetesdockerterraformpulumici/cd
at Yext · 1001-5000 employees
Yext provides a subscription-based digital presence platform (PowerListings) that lets multi-location businesses manage, synchronize, and enrich local listings, photos, hours, and analytics across search sites and apps.
<div class="content-intro"><p>Yext is the leading global enterprise agentic marketing platform. For over 15 years, the world's most recognized brands in financial services, healthcare, retail, hospitality, and food have relied on us to keep their brand visible, accurate, and ahead of the competition across every search and AI surface that matters.<br><br>We drive customer value through our technology, competitive intelligence, and agentic capabilities to win in an AI-first world. Our partners count on us for strategic, proactive guidance and capabilities, and that distinction shapes everything we build.<br><br>Our team takes ownership, challenges each other's thinking, and turns ideas into results without waiting for a playbook. Those who perform at Yext are rewarded with increased scope, opportunities to tackle complex challenges, broader responsibilities, and meaningful development that enables them to grow alongside a company expanding through both product innovation and strategic acquisitions. The market is racing to adapt to AI, and Yext is at the forefront of that shift. Our ambitions are big, our innovation is accelerating, and the opportunity in front of us is enormous. If you want to do the most important work of your career, come join us!</p></div><p>Yext is actively seeking a <strong>Senior Cloud Security Engineer</strong> reporting to the Manager of Product Security within the Cyber Security Office. This role will serve as a core pillar of our Product and Infrastructure Security program, shifting our focus toward robust Cloud Security automation, container security, and Security as Code. The role will enable product, engineering, IT, and security teams to make the right architectural decisions by implementing automated security controls, managing advanced cloud security tools, and leading security incident response efforts. In this role, you will also assist other Cyber Security leaders in driving a culture of security awareness within Yext, promote DevSecOps best practices, and champion cloud compliance initiatives.</p> <h3><strong>What You'll Do</strong></h3> <ul> <li><strong>Drive Cloud Security Maturity:</strong> Lead the maturity of our Cloud and Enterprise Security programs by proactively identifying architectural infrastructure gaps and developing optimized, automated solutions.</li> <li><strong>Security as Code & Guardrails:</strong> Design, deploy, and maintain immutable cloud security controls across AWS and GCP environments using Infrastructure as Code (IaC) tools like Terraform.</li> <li><strong>Container & Orchestration Security:</strong> Define, implement, and monitor security baselines for containerized workloads and orchestration platforms, focusing on Docker and Kubernetes runtime security.</li> <li><strong>CI/CD & DevSecOps Automation:</strong> Integrate automated security testing tools (SAST, DAST, dependency, and secret scanning) directly into engineering deployment pipelines.</li> <li><strong>Vulnerability & Patch Management:</strong> Oversee the cloud vulnerability scanning program, prioritizing vulnerabilities based on runtime risk and coordinating comprehensive remediation processes across engineering teams.</li> <li><strong>Threat Modeling & Architecture Reviews:</strong> Lead comprehensive security architecture reviews and threat modeling sessions for cloud-native applications, providing actionable technical recommendations to Product and Engineering partners.</li> <li><strong>Policy & Compliance:</strong> Author and contribute to cloud security policies, procedures, and standards while mapping technical controls to compliance frameworks like SOC2 and ISO 27001.</li> </ul> <h3><strong>What You Have</strong></h3> <ul> <li><strong>Experience:</strong> 6+ years of relevant work experience in Cloud Security Engineering or Product Security</li> <li><strong>Cloud Infrastructure Expertise:</strong> Deep technical knowledge and hands-on implementation experience managing security controls within AWS and/or GCP environments.</li> <li><strong>Infrastructure as Code:</strong> Proven experience utilizing Terraform, CloudFormation, or Pulumi to deploy and manage secure infrastructure.</li> <li><strong>Container Security Proficiency:</strong> Practical experience securing Kubernetes environments, managing network policies, and scanning container images.</li> <li><strong>Security Automation:</strong> High proficiency in security automation using Python, Go, PowerShell, or Bash scripting to eliminate manual tasks.</li> <li><strong>Framework Familiarity:</strong> Strong alignment with security frameworks and standards such as NIST, ISO 27001, or CIS benchmarks.</li> <li><strong>Communication & Collaboration:</strong> Strong communication skills and a proven history of collaborating effectively with Engineering, IT, and Product stakeholders to build high-trust partnerships.</li> </ul> <h3><strong>Nice To Have But Not Required</strong></h3> <ul> <li><strong>SIEM & Log Analysis:</strong> Strong understanding of centralized logging architectures, SIEM platforms, and data analysis for identifying anomalies.</li> <li><strong>DFIR & Frameworks:</strong> Practical knowledge of cloud DFIR methodologies and advanced application of the MITRE ATT&CK framework to detect and remediate modern threat vectors.</li> <li><strong>Certifications:</strong> CCSP, AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, or equivalent cloud security certifications.</li> </ul> <p>In today's dynamic threat environment, software firms are increasingly acknowledged as a highly-targeted industry for cyberattacks due to the confidentiality and sensitivity of customer data, as well as the immediacy in which that data is needed to perform their operational duties. Given Yext’s vital role within the software ecosystem, protection of data is paramount in ensuring high-trust relationships with customers, partners, and vendors.</p> <p>#LI-R