Senior Software Engineer - Cloud & Platform Security

Mountain Viewfull timeRemote

Apply on Employer Site

Senior Software Engineer - Cloud & Platform Security at Pronto · LumiJobs

senior

$167k–$230k

H1B: no

Pronto The Senior Software Engineer - Cloud & Platform Security at Pronto focuses on securing cloud environments and Kubernetes platforms managing autonomous vehicle fleets. They design and enforce security controls across identity, secrets, network segmentation, and APIs.

Responsibilities

As a Senior Software Engineer focused on Cloud & Platform Security, you’ll work directly with our Infrastructure team to secure the systems that manage and control our fleet. Rather than duplicating the team’s existing cloud and Kubernetes ownership, you’ll bring deep security expertise across identity, secrets, network segmentation, and the fleet-management and remote-vehicle-control APIs that represent some of the highest-impact systems in our environment.
Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.

Qualification

5+ years of experience in cloudStrong understanding of API security

Required

We’re looking for a hands-on security engineer who can work as an embedded partner to an experienced Infrastructure team. You should be comfortable going deep on cloud and platform security, influencing technical decisions, and helping engineers build secure systems without operating as a gatekeeper..
5+ years of experience in cloud, infrastructure, or platform security.
Hands-on experience working with production Kubernetes environments.
Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
Experience designing or reviewing both coarse-grained and fine-grained authorization models.
Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
Experience managing or securing non-human identities and service-to-service access.
Strong understanding of network segmentation and access boundaries in cloud environments.
Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Preferred

Experience securing real-time or low-latency control-plane systems.
Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.

Benefits

Dental
Vision
401(k)
Equity/RSU
Parental Leave
Life Insurance

Company

Pronto

View company page

Source: greenhouse

Active within the past hour

Remote-friendly

More roles at Pronto

Support Engineer Manager

San Francisco

Senior Robotics Systems Engineer

San Francisco

Staff Software Engineer - Vehicle & Hardware Security

Mountain View

Senior Robotics Planning Engineer

San Francisco

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

Cloud securityKubernetesAPI securityOAuthOIDCmTLS

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site