Security Engineer II, Cloud & Platform Security

About the role

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

Help protect Nscale's cloud platforms, hyperscale GPU clusters, and production environments. As a Security Engineer II in our Cloud & Platform Security team, part of the CISO organization, you'll investigate real findings and incidents, separate meaningful risk from noise, and work with engineering to resolve the causes.

This is a hands-on cloud-security, detection, and response role. You'll review cloud posture, triage production threats, improve the telemetry needed to investigate them, and turn incident findings into lasting improvements in controls and coverage.

What you'll be doing

Cloud posture and findings review

- Review findings from cloud security posture management (CSPM) and cloud-security tooling across our cloud platforms and GPU infrastructure.

- Validate findings against live environments, assess technical and business impact, and assign severity so teams address the right risks first.

- Partner with platform, infrastructure, and engineering teams to drive remediation and track findings to closure.

- Identify recurring misconfigurations and exposure patterns, address their systemic causes, and establish guardrails that make systems secure by design.

Production threat triage

- Triage security alerts and threats in production, determining what's real, how urgent it is, and its potential blast radius.

- Own classification, enrichment, and escalation into incident response when warranted, involving system owners to understand the architecture and impact.

- Keep clear records of what you observed, what you decided, and why.

- Feed lessons back into detections and runbooks so future alerts are easier to assess and act on.

Log and telemetry coverage

- Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services.

- Identify missing sources, fields, or retention, and work with platform and engineering teams to close coverage gaps.

- Help ensure security-relevant telemetry reaches logging and SIEM pipelines reliably and supports detection and investigation.