Cloud Security Engineer

About the role

About Salt Security

Salt Security is the leader in agentic and API security, protecting the world's most innovative enterprises from AI agent and API attacks. Agentic security is the practice of discovering and governing the relationships between LLMs, MCP servers, and the APIs that let AI agents take action. The Salt Security Agentic Security Platform secures the full agentic ecosystem, discovering all agents, MCP connections, and APIs, stopping attacks in real time, and eliminating vulnerabilities before they reach production. Salt Security was founded in 2016 and is backed by Sequoia Capital, S Capital, Tenaya Capital, Salesforce Ventures, Advent International, and other leading investors. For more information, visit salt.security.

At Salt, we’re passionate about what we do. We work as a team and embrace new ideas, wherever they come from. We also enjoy all the benefits of a startup environment, including quickly seeing the results of your work, making an outsized impact on our company, and solving diverse challenges.

Want to make a big difference? We encourage you to apply!

About the position

We are seeking a Cloud Security Engineer with a strong focus on DevSecOps to join our growing team. This senior-level position will play a key role in securing our cloud infrastructure and ensuring the protection of our critical data. The role involves not only the day-to-day operation and maintenance of our cloud and SaaS security systems but also the development and implementation of advanced security measures across the organization.

You will be responsible for leading the security strategy and incident response processes, ensuring compliance with security frameworks, and driving initiatives related to RFQs and vendor management in relation to security standards. The ideal candidate will have expertise in public cloud security, incident response, compliance management, and DevSecOps practices.

What will you do:

- Lead the design and implementation of security measures, including firewalls, intrusion detection systems, and access controls for cloud environments.

- Manage incident response processes, ensuring timely identification, containment, and resolution of security incidents.

- Ensure compliance with security policies and industry standards for RFQs, contracts, and regulatory requirements (e.g., SOC 2, ISO 27001).

- Provide expertise and support for SaaS security, Cloud security, ZTNA systems, DLP, CASB, SIEM.

- Collaborate cross-functionally to integrate security into all aspects of our IT & Security infrastructure and operations, particularly in cloud environments.

- Develop and maintain documentation for security systems, procedures, and response plans to ensure effective governance and audit-readiness.

- Monitor security alerts, vulnerabilities, and compliance gaps, ensuring the appropriate response mechanisms are in place and addressing risks proactively.