Staff Cloud Security Engineer

About the role

About Typeface We help the world’s biggest brands move from brief to fully personalized campaigns — in days, not months.

Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona and Menlo, we’re building category-defining technology at the intersection of creativity and AI with real impact. Join us to help shape the future of enterprise marketing.

What You’ll Do

We’re looking for a Staff Cloud Security Engineer to help lead the security of our cloud platform. You’ll design, build, and operate the controls that protect our infrastructure end to end — so the enterprise marketers who rely on Typeface can move fast with confidence that their brands, content, and data are safe.

This is your chance to shape how a fast-growing AI company secures the cloud — not just by finding risks, but by building secure-by-default systems, guardrails, and automation that let every team ship faster and safer.

How You’ll Make an Impact:

- Lead the design and implementation of security architecture across our cloud environments – from identity and networking to data protection and workload security

- Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks

- Own identity and access management, applying least-privilege principles across accounts, services, and users

- Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy

- Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution

- Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001

- Partner with incident response to investigate and remediate cloud security events

- Mentor and support teammates, helping to shape a strong, security-first engineering culture

What You Bring:

- 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale

- Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience

- Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services

- Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)

- Strong understanding of IAM, network security, encryption, key management, and secrets management

- Scripting or programming skills (Python, Go, or Bash) to automate security controls

- Excellent communication skills and the ability to thrive independently and in collaborative teams

- Experience supporting B2B or enterprise SaaS products