Staff Security Engineer, Cloud Security

Attentive® is the AI marketing platform for 1:1 personalization redefining the way brands and people connect. We’re the only marketing platform that combines powerful technology with human expertise to build authentic customer relationships. By unifying SMS, RCS, email, and push notifications, our AI-powered personalization engine delivers bespoke experiences that drive performance, revenue, and loyalty through real-time behavioral insights.

Recognized as the #1 provider in SMS Marketing by G2, Attentive partners with more than 8,000 customers across 70+ industries. Leading global brands like Crate and Barrel, Urban Outfitters, and Carter’s work with us to enable billions of interactions that power tens of billions in revenue for our customers.

With a distributed global workforce and employee hubs in New York City, San Francisco, London, and Sydney, Attentive’s team has been consistently recognized for its performance and culture. We’re proud to be included in  Deloitte’s Fast 500  (four years running!), LinkedIn’s Top Startups,  Forbes’ Cloud 100 (five years running!), Inc.’s Best Workplaces, and the Human Rights Campaign Foundation's Corporate Equality Index!

About the Role

As a Staff Security Engineer focused on Cloud Security, you will help improve how Attentive protects its cloud infrastructure, applications, data, and engineering systems.

This is a hands-on role with broad impact. You will work closely with Security, Infrastructure, Platform, SRE, and Engineering teams to understand cloud risks, improve architecture, and build security controls that work at scale.

At the Staff level, you will look beyond individual findings and help identify broader risks, set technical direction, and guide teams toward practical security improvements.

What You’ll Accomplish

• Own and improve Attentive’s cloud security strategy and roadmap, with a focus on the risks that matter most.
• Design and improve cloud security controls across identity and access, networking, workload security, data protection, secrets, logging, monitoring, and vulnerability management.
• Work with engineering teams to build security into cloud architecture, infrastructure-as-code, CI/CD pipelines, containers, Kubernetes, and cloud services.
• Improve cloud identity and access controls, including least privilege, privileged access, workload identity, and trust between services and environments.
• Improve the security of software delivery and cloud infrastructure, including how systems are built, deployed, changed, and accessed.
• Create reusable security patterns, standards, and automated guardrails that make it easier for teams to build securely.
• Identify and prioritize broader cloud risks by connecting vulnerabilities, misconfigurations, access paths, and architecture decisions to realistic business impact.
• Help teams fix complex security issues by explaining the risk clearly, recommending practical solutions, and helping set priorities.
• Provide security guidance for new systems and major projects so security is considered early in the design process.
• Improve cloud security monitoring and visibility so important events and suspicious activity can be found and investigated.
• Support cloud security incidents by helping understand what happened, what was affected, and what needs to change.
• Evaluate cloud security tools and capabilities and help decide when Attentive should build, automate, configure, or buy a solution.
• Define useful cloud security metrics so Security and Engineering leaders can understand risk, progress, and areas that need attention.
• Support and guide other engineers through design reviews, technical advice, documentation, and shared security patterns.

Your Expertise

• 8+ years of experience in security, infrastructure, or related engineering roles, with strong experience in AWS and cloud-native environments.
• Strong understanding of cloud security, including identity, access, networking, workload security, encryption, secrets, logging, monitoring, and data protection.
• Experience designing and operating security controls in a major cloud platform.
• Strong knowledge of cloud identity and access management, including least privilege, workload identity, privileged access, and service-to-service access.
• Experience securing containers and Kubernetes, including workload identity, image security, secrets, networking, and runtime controls.
• Experience with infrastructure-as-code (e.g., Terraform) and CI/CD, with the ability to automate security checks and controls in engineering workflows.
• Ability to review complex systems and identify broader security risks that may not be clear from individual findings.
• Experience using cloud security, vulnerability, posture management, or detection tools while applying judgment beyond the severity shown by the tool.
• Ability to explain technical issues as realistic attack paths, business impact, and clear remediation priorities.
• Good engineering judgment and the ability to balance security, reliability, developer experience, and business needs.
• Experience leading technical work and influencing engineers and leaders without direct authority.
• Strong written and verbal communication skills with both technical and non-technical audiences.

You'll get competitive perks and benefits, from health & wellness to equity, to help you bring your best self to work.

For US based applicants:

• The US base salary range for this full-time position is $179,000 - $264,000 annually  + equity + benefits
• Our salary ranges are determined by role, level and location

#LI-AB 

By applying for this position, your data will be processed as per Attentive's Privacy Policy.

Attentive Company Values

Default to Action - Move swiftly and with purpose

Be One Unstoppable Team - Rally as each other’s champions

Champion the Customer - Our success is defined by our customers' success

Act Like an Owner  - Take responsibility for Attentive’s success

Learn more about AWAKE, Attentive’s collective of employee resource groups.

If you do not meet all the requirements listed here, we still encourage you to apply! No job description is perfect, and we may also have another opportunity that closely matches your skills and experience.

At Attentive, we know that our Company's strength lies in the diversity of our employees. Attentive is an Equal Opportunity Employer and we welcome applicants from all backgrounds. Our policy is to provide equal employment opportunities for all employees, applicants and covered individuals regardless of protected characteristics. We prioritize and maintain a fair, inclusive and equitable workplace free from discrimination, harassment, and retaliation. Attentive is also committed to providing reasonable accommodations for candidates with disabilities. If you need any assistance or reasonable accommodations, please let your recruiter know.