Staff Cloud Security Engineer

What You’ll Do

We’re looking for a Staff Cloud Security Engineer to help lead the security of our cloud platform. You’ll design, build, and operate the controls that protect our infrastructure end to end — so the enterprise marketers who rely on Typeface can move fast with confidence that their brands, content, and data are safe.

This is your chance to shape how a fast-growing AI company secures the cloud — not just by finding risks, but by building secure-by-default systems, guardrails, and automation that let every team ship faster and safer.

How You’ll Make an Impact:

• Lead the design and implementation of security architecture across our cloud environments – from identity and networking to data protection and workload security
• Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks
• Own identity and access management, applying least-privilege principles across accounts, services, and users
• Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution
• Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001
• Partner with incident response to investigate and remediate cloud security events
• Mentor and support teammates, helping to shape a strong, security-first engineering culture

What You Bring:

• 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale
• Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
• Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services
• Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)
• Strong understanding of IAM, network security, encryption, key management, and secrets management
• Scripting or programming skills (Python, Go, or Bash) to automate security controls
• Excellent communication skills and the ability to thrive independently and in collaborative teams
• Experience supporting B2B or enterprise SaaS products
• Bonus: Background securing AI or generative AI systems
• Bonus: Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP

Location

This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.

Base Salary

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.

Benefits

• Competitive compensation — including salary, equity, and 401(k)
• Full medical, dental, and vision insurance for you and your family
• HSA and FSA options to support your financial wellness
• Flexible time off — including parental leave
• Well-being programs — resources to support your mental and physical health
• Daily lunch & snacks
• Mentorship & impact — work closely with top AI leaders on products that ship

Why You’ll Love Working Here

• Build something big — Be part of a fast-growing startup defining a new category: marketing orchestration powered by Agentic AI.
• Your work will matter — Trusted by Fortune 100 companies, our platform delivers 10x content velocity and 90% faster campaigns.
• A+ team — Collaborate with veterans from Meta, Amazon, Adobe, Google, Microsoft, and top AI companies.
• Backed by the best — GV, Salesforce Ventures, Microsoft, Lightspeed, Madrona and Menlo ($165M raised).
• Recognized for innovation — TIME Best Inventions, Fast Company Next Big Thing in Tech, Gartner Cool Vendor, Adweek AI Company of the Year, LinkedIn Top Startup, Webby Award (AI Work & Productivity).