Tessera Labs
Senior Cloud Security Engineer
Remote in the U.S · Senior
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- We're hiring a Senior Cloud Security Engineer to make our cloud environments secure by default.
Responsibilities
- Own the security posture of our cloud environments across Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure, applying consistent controls across providers.
- Design secure reference architectures and reusable patterns - account and project structure, network segmentation, encryption and key management, secrets management - that teams can adopt instead of reinventing.
- Build security into Infrastructure as Code (IaC) through hardened modules, policy as code, and pre-deploy checks, so misconfigurations are caught before they reach production.
- Design and enforce least-privilege Identity and Access Management (IAM) across clouds, including role design, federation with our identity provider, and periodic access reviews.
- Operate and tune Cloud Security Posture Management (CSPM) and cloud-native security services, and drive findings through to remediation with owning teams.
- Build logging and detection for cloud control-plane and workload activity, and lead the cloud side of incident response.
Requirements
- Hands-on experience with IaC (for example, Terraform or OpenTofu) and with embedding security checks into it.
Nice to have
- Familiarity with open-source cloud security tooling (for example, Prowler for posture assessment, Checkov or Trivy for IaC and container scanning, Open Policy Agent (OPA) for policy as code, Falco for runtime detection).
- Container and Kubernetes security experience (Amazon EKS, Google Kubernetes Engine, or Azure Kubernetes Service), including admission control and runtime policy.
- Experience securing SaaS and developer platforms, such as identity providers and GitHub organizations.
- Experience supporting a SOC 2, ISO 27001, or similar program, including compliance automation platforms.
- Hands-on cloud incident response or forensics experience.
- WHAT SUCCESS LOOKS LIKE (FIRST 90 DAYS)
- You've mapped our cloud footprint across providers - accounts and projects, identities, internet exposure, and sensitive data stores - and identified the highest-priority risks with a remediation plan.
- Security checks run automatically on infrastructure changes in CI/CD, and engineers know how to engage you early on new infrastructure work.
Skills
- You'll do it with a DevOps mindset:
This listing is sourced directly from Tessera Labs's careers page and normalized into a canonical job model.