PagerDuty
Senior Security Engineer - Cloud Security
Atlanta · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →H-1B wage level
the lottery is wage-weighted — each level is one more entry
$7,518 more — $157,518 — moves this role to Level IV and 4 lottery entries. That figure is inside the range the employer already advertised.
Based on the DOL prevailing wage for this occupation and worksite, a base salary of $157,518 would place this position at wage Level IV. That figure is within the posted range, and I'd like to target it. This role classifies under "Software Developers" for prevailing-wage purposes.
DOL prevailing wage, 2026-27 wage year · Software Developers (15-1252) · Atlanta-Sandy Springs-Roswell, GA. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- At the senior end of this role, you'll help draft external- and auditor-facing communication and represent the team in cross-team planning.
- The base salary range for this position is 150,000 - 251,900 USD.
Responsibilities
- Own Kubernetes and container security end to end - harden EKS clusters and the Istio service mesh against the CIS Kubernetes Benchmark, DISA Kubernetes STIG, and NSA/CISA Kubernetes hardening guidance, design and enforce Kubernetes RBAC and least-privilege workload identity (IRSA/pod identity), and drive controls for the container supply chain (image provenance, admission control, runtime policy).
- Build and operate security-focused platforms, services, and automation at scale - using Python/Go, Terraform, and Kubernetes policy-as-code - that reduce manual work and let 30+ engineering teams move quickly and safely.
- Design and roll out Service Control Policy (SCP) guardrails and least-privilege IAM/PAM across dozens of accounts and multiple orgs.
- Lean into AI to unlock efficiency and velocity - consume agentic tooling in day-to-day work and build lightweight agentic solutions that streamline repetitive security work: posture triage, threat modeling, risk assessment, incident enrichment and investigation, compliance-evidence generation, and detection tuning.
- Partner closely with our AppSec and GRC teams - aligning platform controls with secure-development needs and translating hardening, identity, and encryption work into audit and compliance evidence.
- Own PKI and encryption standards across the environment - certificate lifecycle and management, KMS-backed key management and rotation, TLS/mTLS (including within the Istio mesh), and encryption-at-rest and in-transit requirements - and define the standards other teams build against.
Requirements
- Proficiency in Python and/or Go (or similar) and Infrastructure as Code (Terraform).
- Deep expertise with AWS security services and least-privilege IAM/PAM - IAM family, Organizations/SCPs, Secrets Manager, KMS, GuardDuty, CloudTrail, and Config.
- Ability to automate security controls as code (Kubernetes policy-as-code) and inform detection strategy in a modern SIEM (e.g., CrowdStrike NG-SIEM, Splunk), including threat hunting within your domains.
Nice to have
- Hands-on expertise in PKI and cryptography - certificate lifecycle/management, TLS/mTLS, key management and rotation (AWS KMS or similar HSM/KMS), and encryption at rest and in transit.
- Hands-on hardening to CIS Benchmarks and DISA STIGs within a FedRAMP (or similar) program
- familiarity with NIST CSF, SOC 2, or ISO 27001
- and experience partnering with AppSec and GRC teams to produce compliance evidence.
- Cloud-native security tooling such as Wiz (CNAPP/Threats) and CrowdStrike Falcon runtime protection
- Azure security exposure (Entra ID, Defender for Cloud) a plus.
- Demonstrated mentoring, strong written and verbal communication, and working knowledge of PagerDuty's Incident Management and Process Automation products.
- Hesitant to apply?
Skills
- PagerDuty, Inc. (NYSE: PD) is the global leader in AI-first digital operations.
- Senior Security Engineer - Cloud Security (Platform Engineering, Kubernetes & Identity)
Compensation
- The base salary range for this position is 150,000 - 251,900 USD.
- Mentor and guide teammates on platform, identity, and cryptography security practices, and contribute to roadmap and annual planning.
- Competitive salary
Benefits
- As a global organization, our total rewards approach is competitive with industry standards and aligned with local laws and regulations.
- Learn more, including country-specific offerings, on our benefits site.
- Comprehensive benefits package
- Flexible work arrangements
- Company equity*
- ESPP (Employee Stock Purchase Program)*
- Retirement or pension plan*
- Generous paid vacation time
- Paid holidays and sick leave
- Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
- Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)*
- Paid volunteer time off: 20 hours per year
Company info
- Notable customers include Chipotle, Cloudflare, Docusign, Fox, Nvidia, Salesforce, Spotify, Zoom and more.
- Senior Security Engineer - Cloud Security (Platform Engineering, Kubernetes & Identity) PagerDuty is seeking a Senior Security Engineer to join our Cloud Security team, part of Security Engineering within the CTO organization.
- What we offer As a global organization, our total rewards approach is competitive with industry standards and aligned with local laws and regulations.
This listing is sourced directly from PagerDuty's careers page and normalized into a canonical job model.