Loading...
SeniorFull-timeRailsGCPKubernetesCI/CDGitAI
Salary Range
$92,820 - $125,580 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a Senior Security Engineer to join our Information Security team at Moss. This role will focus on strengthening and scaling our cloud security architecture, detection capabilities, and incident response maturity across Moss’ infrastructure and SaaS ecosystem.
Key Responsibilities
- →Design and continuously improve Moss’ security architecture in GCP, including IAM design, organizational policies, logging strategy, and network controls.
- →Own and evolve our Cloud Security Posture Management setup in Wiz, prioritizing and driving remediation of misconfigurations, identity risks, vulnerabilities, and runtime threats.
- →Work closely with Platform Engineering to embed scalable and pragmatic security guardrails into our infrastructure.
- →Own and continuously improve our Datadog Cloud SIEM.
- →Develop, tune, and maintain detection rules across cloud logs, identity systems, SaaS integrations, and security-relevant application logs.
- →Drive the integration of critical systems into the SIEM as part of vendor onboarding and annual control reviews.
- →Translate threat scenarios and real-world attack paths into effective detection coverage.
- →Continuously improve log ingestion strategies across GCP, Google Workspace, Wiz, Atlassian, Jumpcloud and other critical systems.
- →Investigate complex cloud and SaaS security events and incidents.
- →Improve incident response playbooks, post-incident reviews, and learning loops.
Requirements
- ✓Proven experience (5+ years) in security engineering with deep hands-on expertise in cloud security and security operations.
- ✓Strong practical experience securing GCP environments, including IAM, Cloud Audit Logs, organizational policies, and network architecture.
- ✓Strong experience securing Kubernetes environments (RBAC, service accounts, Workload Identity, network policies, container risks).
- ✓Experience building and operating SIEM platforms (Datadog preferred; Splunk, Elastic or similar acceptable).
- ✓Experience with Cloud Security Posture Management tools (Wiz preferred) and risk-based remediation workflows.
- ✓Experience securing CI/CD pipelines (e.g. GitHub Actions), including identity federation and secret management.
- ✓Strong understanding of cloud attack paths, identity risks, and modern infrastructure threats.
- ✓Experience working in cloud-native, DevOps-driven environments.
- ✓Fluent English language skills, verbal and written.
Free to sign up. Takes 30 seconds.
