{"id":2874796,"url":"https://alion.io/job/tessera-labs-senior-cloud-security-engineer","title":"Senior Cloud Security Engineer","company":{"id":686590,"name":"Tessera Labs","domain":"tesseralabs.ai","url":"https://alion.io/company/tesseralabs","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US","CA","MX","AI","AG","AW","BS","BB","BZ","BM","VG","BQ","KY","CR","CW","DM","DO","SV","GL","GD","GP","GT","HT","HN","JM","MQ","MS","NI","PA","PR","KN","LC","VC","PM","SX","TT","TC","VI"],"hiring_countries_total":38,"salary":{"min":190000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"OpenTofu","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Azure AKS","optional":true},{"name":"Checkov","optional":true},{"name":"Falco","optional":true},{"name":"GitHub","optional":true},{"name":"Google GKE","optional":true},{"name":"Kubernetes","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"Prowler","optional":true},{"name":"Trivy","optional":true}],"status":"live","first_seen_at":"2026-10-19T20:38:51Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-20T08:38:45Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Senior Cloud Security Engineer\nThe Role\nWe're hiring a Senior Cloud Security Engineer to make our cloud environments secure by default. You'll design and build the guardrails, automation, and detection that keep our infrastructure defensible across multiple cloud providers.\nYou'll do it with a DevOps mindset: writing code, shipping changes through the same pipelines our engineers use, and building paved roads teams want to adopt, rather than handing down policy from the outside.\nThis role partners closely with platform and infrastructure engineering, customer support, and delivery teams, as well as IT and compliance.\nWhat You'll Do\nOwn the security posture of our cloud environments across Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure, applying consistent controls across providers.\n\nDesign secure reference architectures and reusable patterns - account and project structure, network segmentation, encryption and key management, secrets management - that teams can adopt instead of reinventing.\n\nBuild security into Infrastructure as Code (IaC) through hardened modules, policy as code, and pre-deploy checks, so misconfigurations are caught before they reach production.\n\nSecure Continuous Integration / Continuous Delivery (CI/CD) pipelines and the software supply chain: pipeline permissions, secrets handling, artifact integrity, and short-lived workload identity in place of long-lived keys.\n\nDesign and enforce least-privilege Identity and Access Management (IAM) across clouds, including role design, federation with our identity provider, and periodic access reviews.\n\nWrite code and scripts to automate security controls, remediation, and evidence collection - if you do something twice, you automate it the third time.\n\nOperate and tune Cloud Security Posture Management (CSPM) and cloud-native security services, and drive findings through to remediation with owning teams.\n\nBuild logging and detection for cloud control-plane and workload activity, and lead the cloud side of incident response.\n\nContribute security controls and evidence to our compliance posture (System and Organization Controls 2, or SOC 2, ISO 27001, etc.).\n\nWhat You'll Need (Required)\nA DevOps foundation - you've worked in a DevOps, Site Reliability Engineering (SRE), or platform engineering role, and you've built and operated production infrastructure and CI/CD pipelines yourself, not just reviewed them.\n\nHands-on production experience securing at least two major cloud providers (AWS, GCP, or Azure), and a clear understanding of how their identity, networking, and logging models differ.\n\nDeep knowledge of cloud security best practices - for example, the Center for Internet Security (CIS) Benchmarks and each provider's security foundations guidance - and the judgment to apply them pragmatically rather than as a checklist.\n\nFluency in proven cloud security patterns: least-privilege IAM and workload identity, network segmentation and private connectivity, encryption and key management, secrets management, centralized logging, and preventive guardrails (for example, AWS Service Control Policies or GCP Organization Policies).\n\nStrong coding and scripting skills in at least one general-purpose language (for example, Python or Go) plus shell scripting; you write automation other engineers can read and maintain.\n\nHands-on experience with IaC (for example, Terraform or OpenTofu) and with embedding security checks into it.\n\nStrong communication skills - you work directly with engineers and can explain risk in terms they'll act on.\n\nNice to Have\nFamiliarity with open-source cloud security tooling (for example, Prowler for posture assessment, Checkov or Trivy for IaC and container scanning, Open Policy Agent (OPA) for policy as code, Falco for runtime detection).\n\nContainer and Kubernetes security experience (Amazon EKS, Google Kubernetes Engine, or Azure Kubernetes Service), including admission control and runtime policy.\n\nA relevant cloud security certification (for example, AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, or Certified Cloud Security Professional, CCSP).\n\nExperience securing SaaS and developer platforms, such as identity providers and GitHub organizations.\n\nExperience supporting a SOC 2, ISO 27001, or similar program, including compliance automation platforms.\n\nHands-on cloud incident response or forensics experience.\n\nWhat Success Looks Like (First 90 Days)\nYou've mapped our cloud footprint across providers - accounts and projects, identities, internet exposure, and sensitive data stores - and identified the highest-priority risks with a remediation plan.\n\nBaseline guardrails, centralized logging, and posture monitoring cover every cloud account and project, with findings routed to the teams that own them.\n\nSecurity checks run automatically on infrastructure changes in CI/CD, and engineers know how to engage you early on new infrastructure work.\n\nLocation and Work Model\nRemote in North America","description_format":"text","description_chars":5058,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Greenland","iso":"GL","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","ERP & Business Management Software","AI Agents","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-10-19T21:00:57Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 10","filings_12m":10,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":182500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":38,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/tessera-labs-senior-cloud-security-engineer","json_url":"https://alion.io/job/tessera-labs-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-10-20T09:29:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10297,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686590},"rest":"https://alion.io/mcp/rest/get_company?id=686590"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftessera-labs-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftessera-labs-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftessera-labs-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tessera-labs-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftessera-labs-senior-cloud-security-engineer"}]}