{"id":59266,"url":"https://alion.io/job/also-inc-staff-security-engineer-cloud","title":"Staff Security Engineer, Cloud","company":{"id":1815368,"name":"ALSO","domain":"ridealso.com","url":"https://alion.io/company/ridealso","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":79,"open_postings":12,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":205000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"DynamoDB","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"SBOM","optional":false},{"name":"Service Mesh","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-14T15:32:59Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-10-17T21:23:08Z","board_verified":true,"closed_at":null,"days_open":64,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":64},"description":"About ALSO.\nWe’re ALSO, an electric mobility company originally conceived as a part of Rivian. We’re a passionate team of builders, dreamers, doers and innovators, focused on creating entirely new (not to mention, innovative and delightful) vertically integrated, small EVs designed to meet the global mobility challenges of today and tomorrow. Our mission is to inspire everyone to ride ALSO-replacing many local car, truck and SUV miles with ones on vehicles that are more affordable, more enjoyable and 10-50x more efficient.\nAt ALSO, we are looking for a Staff Security Engineer for Cloud who wants to own security end to end - not advise on it, build it - for a connected, software-defined EV platform where nearly everything of value runs through the cloud: telemetry streaming in from vehicles in the field, remote diagnostics and updates, fleet intelligence, and the product APIs customers touch every day.\nYou'd set the security architecture and then build it yourself, in Go, alongside the backend team - equally comfortable writing a threat model, reviewing a Kubernetes admission policy, and shipping the service that enforces it. You'd be the person the company turns to for every question that starts with \"is this secure,\" with the autonomy to actually answer it properly rather than just flag the risk and move on.\nWhat You'll Do\nOwn cloud security end to end - strategy, architecture, implementation, and operations across AWS, Kubernetes, and our microservices platform - including threat modeling new systems in architecture reviews before the code exists\n\nDesign and implement identity and access at scale: workload identity, org-wide IAM, least privilege by default, secrets management, and certificate/key lifecycle, including mutual TLS between services and between cloud and vehicle\n\nHarden containers and orchestration: image provenance, admission control, runtime and network policy, service mesh configuration, and clean isolation across microservices\n\nSecure the software supply chain: SBOM generation, dependency and image scanning, signed artifacts, and CI/CD pipelines that fail closed on what matters and stay quiet on what doesn't\n\nBuild the controls in Go - authorization services, policy enforcement, provisioning and rotation tooling - and serve as the DevSecOps function, writing guardrails and policy as code so other engineers move fast without routing every decision through security\n\nRun detection and response: security logging and telemetry, meaningful alerting, runbooks, on-call for security incidents, and blameless postmortems that produce real fixes\n\nSecure the vehicle-to-cloud boundary: device identity and provisioning, fleet-wide certificate rotation, secure OTA update paths, and anomaly and tamper detection at scale\n\nContribute to core backend work alongside the team, and own assurance - penetration tests, vulnerability management, evidence collection, and proportionate standards work that strengthens the product instead of slowing it down\n\nWhat You'll Bring\n10+ years in backend and infrastructure engineering, with a substantial portion spent owning security in production\n\nExpert, hands-on AWS: IAM, VPC and network design, KMS, Secrets Manager, GuardDuty, Security Hub, CloudTrail, Config, and org-level guardrails (SCPs), alongside core compute and data services (EKS, ECS, ECR, Lambda, DynamoDB, S3)\n\nDeep Kubernetes and container security - RBAC, admission controllers, pod security standards, network policy, secrets handling, runtime detection, and image hardening - with real experience operating clusters, not just reading about them\n\nFast, fluent Go: you design, review, and ship production Go code today, not several years ago\n\nMicroservices and distributed systems security: service-to-service authentication and authorization, API gateway patterns, rate limiting, tenant isolation, and event-driven pipeline security\n\nIdentity protocols and applied cryptography in practice: OAuth2, OIDC, JWT, SAML, mutual TLS, and PKI with certificate lifecycle management at scale\n\nInfrastructure and policy as code, with security gating built into CI/CD\n\nThreat modeling and secure architecture review as routine practice, with specific examples of designs you've changed, plus incident response you've personally led from detection through postmortem\n\nDemonstrated 0 to 1 ownership: you've stood up a security function or program where none existed, without a large team behind you\n\nThe salary for this position ranges from $205,000 - $240,000 per year, depending on experience, qualifications, and location.\nPerks & Benefits\nRobust health coverage - excellent health, dental and vision insurance covered up to 100% by ALSO with FSA & HSA options\n\nOne Medical membership and dedicated insurance advocates\n\nRich fertility and family building benefits with Progyny\n\nFlexible time off\n\n401(k) match\n\nWhy ALSO.\nWe’re passionate about helping the world find a better way to get there-wherever it is you’re headed.\nWe’re located in the heart of Silicon Valley and have brought together a world-class team from some of the biggest brands in the technology, automotive, cycling, outdoor recreation and retail spaces.\nTogether we’re working hands-on to imagine, design and build an entirely new solution to a global set of transportation challenges.","description_format":"text","description_chars":5302,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible time off","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Transportation & Logistics","Shared Mobility","Smart Mobility"],"lifecycle":[{"event":"open","at":"2026-08-14T15:32:59Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.515,"p_room":0.44,"age_days":63,"expected_fill_days":48,"reasons":["conf:0","stale_co","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/also-inc-staff-security-engineer-cloud","json_url":"https://alion.io/job/also-inc-staff-security-engineer-cloud.json","meta":{"generated_at":"2026-10-17T23:37:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1952,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1815368},"rest":"https://alion.io/mcp/rest/get_company?id=1815368"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falso-inc-staff-security-engineer-cloud"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falso-inc-staff-security-engineer-cloud"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falso-inc-staff-security-engineer-cloud"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/also-inc-staff-security-engineer-cloud\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falso-inc-staff-security-engineer-cloud"}]}