Similar Jobs
Software
Secure Temporal’s multi-cloud platform across AWS, GCP, and Azure by embedding security into infrastructure and application architecture. Responsibilities include threat modeling, risk assessment, Kubernetes hardening, multi-tenant isolation, gRPC and mTLS security, service mesh configuration, cloud security posture management with Wiz, secrets management, encryption, compliance policy development, engineering partnership, and on-call participation. The role also contributes to responsible AI practices and security for distributed workflow systems.
Top Skills:
AWSAws Secrets ManagerAzureCis BenchmarksCsa Cloud Controls MatrixEnvoyFedrampGCPGoGrpcHashicorp VaultIso 27001IstioKubernetesMtlsPythonSoc 2 Type IiWiz
Artificial Intelligence • Insurance • Software • Automation
Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.
Top Skills:
AntivirusAWSBashCi/CdEdrEncryptionIamLogging/MonitoringMdmNetwork SecurityPowershellPythonTerraformTypescript
Artificial Intelligence • Cloud • Fintech • Machine Learning • Mobile • Software
Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.
Top Skills:
ArmAWSAzureAzure DevopsBashBicepCloudFormationCspmCwppDockerGCPGitGitlabInfrastructure As Code (Iac)JenkinsKubernetesPowershellPythonSIEMTerraform
Lead cloud security strategy and engineering across AWS infrastructure, applications, data, Kubernetes, CI/CD, and cloud-native systems. Design security controls for identity, networking, workloads, secrets, monitoring, and vulnerability management; automate guardrails; assess broader risks and attack paths; guide architecture and incident response; define security metrics; and influence engineering teams through technical leadership and communication.
Attentive® is the AI marketing platform for 1:1 personalization redefining the way brands and people connect. We’re the only marketing platform that combines powerful technology with human expertise to build authentic customer relationships. By unifying SMS, RCS, email, and push notifications, our AI-powered personalization engine delivers bespoke experiences that drive performance, revenue, and loyalty through real-time behavioral insights.
Recognized as the #1 provider in SMS Marketing by G2, Attentive partners with more than 8,000 customers across 70+ industries. Leading global brands like Crate and Barrel, Urban Outfitters, and Carter’s work with us to enable billions of interactions that power tens of billions in revenue for our customers.
With a distributed global workforce and employee hubs in New York City, San Francisco, London, and Sydney, Attentive’s team has been consistently recognized for its performance and culture. We’re proud to be included in Deloitte’s Fast 500 (four years running!), LinkedIn’s Top Startups, Forbes’ Cloud 100 (five years running!), Inc.’s Best Workplaces, and the Human Rights Campaign Foundation's Corporate Equality Index!
About the Role
As a Staff Security Engineer focused on Cloud Security, you will help improve how Attentive protects its cloud infrastructure, applications, data, and engineering systems.
This is a hands-on role with broad impact. You will work closely with Security, Infrastructure, Platform, SRE, and Engineering teams to understand cloud risks, improve architecture, and build security controls that work at scale.
At the Staff level, you will look beyond individual findings and help identify broader risks, set technical direction, and guide teams toward practical security improvements.
What You’ll Accomplish
- Own and improve Attentive’s cloud security strategy and roadmap, with a focus on the risks that matter most.
- Design and improve cloud security controls across identity and access, networking, workload security, data protection, secrets, logging, monitoring, and vulnerability management.
- Work with engineering teams to build security into cloud architecture, infrastructure-as-code, CI/CD pipelines, containers, Kubernetes, and cloud services.
- Improve cloud identity and access controls, including least privilege, privileged access, workload identity, and trust between services and environments.
- Improve the security of software delivery and cloud infrastructure, including how systems are built, deployed, changed, and accessed.
- Create reusable security patterns, standards, and automated guardrails that make it easier for teams to build securely.
- Identify and prioritize broader cloud risks by connecting vulnerabilities, misconfigurations, access paths, and architecture decisions to realistic business impact.
- Help teams fix complex security issues by explaining the risk clearly, recommending practical solutions, and helping set priorities.
- Provide security guidance for new systems and major projects so security is considered early in the design process.
- Improve cloud security monitoring and visibility so important events and suspicious activity can be found and investigated.
- Support cloud security incidents by helping understand what happened, what was affected, and what needs to change.
- Evaluate cloud security tools and capabilities and help decide when Attentive should build, automate, configure, or buy a solution.
- Define useful cloud security metrics so Security and Engineering leaders can understand risk, progress, and areas that need attention.
- Support and guide other engineers through design reviews, technical advice, documentation, and shared security patterns.
Your Expertise
- 8+ years of experience in security, infrastructure, or related engineering roles, with strong experience in AWS and cloud-native environments.
- Strong understanding of cloud security, including identity, access, networking, workload security, encryption, secrets, logging, monitoring, and data protection.
- Experience designing and operating security controls in a major cloud platform.
- Strong knowledge of cloud identity and access management, including least privilege, workload identity, privileged access, and service-to-service access.
- Experience securing containers and Kubernetes, including workload identity, image security, secrets, networking, and runtime controls.
- Experience with infrastructure-as-code (e.g., Terraform) and CI/CD, with the ability to automate security checks and controls in engineering workflows.
- Ability to review complex systems and identify broader security risks that may not be clear from individual findings.
- Experience using cloud security, vulnerability, posture management, or detection tools while applying judgment beyond the severity shown by the tool.
- Ability to explain technical issues as realistic attack paths, business impact, and clear remediation priorities.
- Good engineering judgment and the ability to balance security, reliability, developer experience, and business needs.
- Experience leading technical work and influencing engineers and leaders without direct authority.
- Strong written and verbal communication skills with both technical and non-technical audiences.
You'll get competitive perks and benefits, from health & wellness to equity, to help you bring your best self to work.
For US based applicants:
- The US base salary range for this full-time position is $179,000 - $264,000 annually + equity + benefits
- Our salary ranges are determined by role, level and location
#LI-AB
By applying for this position, your data will be processed as per Attentive's Privacy Policy.
Attentive Company Values
Default to Action - Move swiftly and with purpose
Be One Unstoppable Team - Rally as each other’s champions
Champion the Customer - Our success is defined by our customers' success
Act Like an Owner - Take responsibility for Attentive’s success
Learn more about AWAKE, Attentive’s collective of employee resource groups.
If you do not meet all the requirements listed here, we still encourage you to apply! No job description is perfect, and we may also have another opportunity that closely matches your skills and experience.
At Attentive, we know that our Company's strength lies in the diversity of our employees. Attentive is an Equal Opportunity Employer and we welcome applicants from all backgrounds. Our policy is to provide equal employment opportunities for all employees, applicants and covered individuals regardless of protected characteristics. We prioritize and maintain a fair, inclusive and equitable workplace free from discrimination, harassment, and retaliation. Attentive is also committed to providing reasonable accommodations for candidates with disabilities. If you need any assistance or reasonable accommodations, please let your recruiter know.
Attentive New York, New York, USA Office
136 Madison Avenue, New York, NY, United States, 10016
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
