Senior Cloud Security Engineer

About the role

Anyscale is a company dedicated to making distributed computing accessible to all developers, commercializing Ray, an open-source project for scalable machine learning. Anyscale operates production and cloud infrastructure for large and demanding customers.

Responsibilities

• Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation.
• Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity.
• Partner with engineering on secure infrastructure architecture and the secure design of our production environments.
• Own cloud security posture management end to end: triage, prioritization, and driving remediation with the teams that own the resources.
• Define and drive cloud infrastructure security standards: baseline configurations, infrastructure-as-code security, and key and secrets management.
• Drive fine-grained, role-based access to production, in partnership with engineering and IT.
• Feed infrastructure findings into vulnerability management and risk reporting.

Requirements

• 8+ years in security engineering, with a deep focus on cloud and infrastructure security, ideally at a high-growth startup.
• Hands-on expertise securing multi-cloud environments (AWS and Azure) and container platforms (Kubernetes).
• Strong grounding in infrastructure-as-code, cloud networking, and identity and access in cloud environments.
• Experience with CSPM and runtime security tooling, and the judgment to turn findings into prioritized, actioned work.
• The ability to own cloud infrastructure security independently, set its direction, and make sound tradeoffs across teams.
• Fluency working directly with engineers on architecture and remediation, not just producing findings.

Qualifications

• Experience securing multi-tenant production systems or environments that run customer workloads.
• Familiarity with Upwind or similar CSPM and runtime platforms.
• Experience contributing to SOC 2 or ISO 27001 evidence from the infrastructure side.
• Background in AI or ML platforms or distributed systems.