Staff Site Reliability Engineer, Security

About the role

The Staff Site Reliability Engineer (SRE) will play a critical role in securing Stord's cloud infrastructure and ensuring the reliability of our systems. This is a security-focused engineering role rather than a policy or audit one. You will be responsible for building and maintaining a robust security posture, managing vulnerabilities, and automating security processes.

Responsibilities

• Hardening Stord's GCP footprint (GKE, IAM, Cloud Armor)
• Building continuous posture monitoring against a defined baseline
• Driving the evaluation, integration, and rollout of new security tooling
• Establishing and automating the vulnerability and dependency remediation workflow
• Integrating container image scanning and DAST/network scanning programs into the CI/CD pipeline
• Designing and implementing security capabilities that the broader SRE team can run as part of their normal operating model

Requirements

• Deep GCP and GKE security experience
• Hands-on with Dependabot and secret scanning at scale
• Production experience integrating image scanners into CI/CD and registry workflows
• Familiarity with cloud security posture management in practice
• Comfortable with Terraform for cloud resources and writing code to automate security workflows
• Systems-level technical fluency
• Ownership & Accountability, Strong Communication, Collaborative Approach, Production Mindset, Learning Agility, Directed AI-Assisted Development

Qualifications

• Container and image scanning experience
• DAST and network scanning programs experience
• Cloudflare edge security experience
• Experience in detection engineering on GCP
• Prior experience standing up a security program inside an SRE or platform team
• Familiarity with the current supply-chain threat landscape and recent CISA guidance

Skills

• Security-focused engineering
• Terraform for cloud resources
• CI/CD supply chain hardening
• Vulnerability and dependency remediation workflow
• Cloud security posture management
• Container and image scanning
• DAST and network scanning programs
• Cloudflare edge security
• Detection engineering on GCP

Benefits

Stord offers a competitive compensation package, including a market-competitive salary, performance-based bonuses, equity, and benefits such as health insurance, retirement plans, and paid time off.

Pay

Competitive salary based on experience and qualifications.

Schedule

Full-time position with flexible working hours.