Staff Cloud Security Engineer

GRAIL

Staff Cloud Security Engineer leading cloud security initiatives for innovative cancer detection technology company. Collaborating with cross-functional teams to ensure product security and compliance with industry standards.

Posted 7/20/2026full-timeMenlo Park • California • 🇺🇸 United StatesLead💰 $169,000 - $224,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security architecture, including the design and implementation of AWS-native security services and compliance frameworks. Proficient in automating security processes and mentoring teams on best practices in cloud security and DevSecOps.

Highest-signal resume keywords

Cloud Security ArchitectureAWS Security ServicesThreat ModelingVulnerability ManagementDevSecOps Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityProduct SecurityCybersecurityApplication SecuritySecurity Risk AssessmentIncident ResponseInfrastructure as CodeScriptingContinuous Security Posture ManagementPenetration Testing

Soft Skills

MentoringCollaborationCommunication

Tools & Technologies

AWSIAMKMSGuardDutySecurity HubInspectorMacieWAFCloudTrailCloudWatch

Industry Keywords

Cybersecurity RequirementsComplianceRisk ManagementSecure-by-Design PrinciplesCloud-Native Automation

Tech Stack

Tools & technologies

AWSCloudCyber SecurityKubernetes

About the role

Key responsibilities & impact

Lead the design, implementation, and continuous improvement of cloud security architectures across AWS environments, ensuring product security, and secure-by-design principles throughout the infrastructure and application lifecycle.
Partner with Platform, and Cloud Engineering team to design, implement, and manage AWS-native security services including IAM, KMS, GuardDuty, Security Hub, Inspector, Macie, WAF, Shield, CloudTrail, Config, and CloudWatch for proactive threat detection and risk management.
Develop and enforce cloud security standards, guardrails, and governance frameworks across AWS accounts, containers, Kubernetes/EKS, serverless, and hybrid cloud workloads.
Automate security monitoring, compliance validation, vulnerability management, and incident response workflows using Infrastructure as Code (IaC), scripting, and cloud-native automation tools.
Conduct cloud threat modeling, architecture risk assessments, and security reviews for AWS-hosted applications, APIs, infrastructure, and enterprise-integrated systems.
Secure DevOps platforms and cloud-native application environments by implementing least-privilege access controls, secrets management, secure network segmentation, encryption, and workload protection.
Manage and enhance continuous cloud security posture management (CSPM), container security, and runtime protection capabilities across AWS environments.
Scope, coordinate, and review penetration testing, vulnerability assessments, and advanced security testing activities across cloud infrastructure, applications, and DevOps tooling.
Serve as a cloud security subject matter expert during security incidents, forensic investigations, root cause analysis, and remediation activities.
Partner with Engineering, Platform, Infrastructure, Compliance, and Product teams to align cloud security strategies with regulatory, privacy, and industry cybersecurity requirements.
Define, track, and report cloud security metrics, operational KPIs, and compliance status to provide visibility into organizational security posture and risk trends.
Mentor and guide engineers on AWS security best practices, DevSecOps methodologies, automation strategies, and secure cloud engineering principles to strengthen organizational security maturity at GRAIL.

Requirements

What you’ll need

8+ years of experience in product security, cybersecurity, Cloud Security, application security, or related technical security roles.
Hands-on experience leading threat modeling, security risk assessments, and vulnerability management for complex software products.
Experience embedding security into modern software development environments, including CI/CD and DevSecOps practices.
Experience supporting security incident response and conducting root cause analysis in production environments.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent practical experience.

Benefits

Comp & perks

flexible time-off or vacation
a 401(k) retirement plan with employer match
medical, dental, and vision coverage
carefully selected mindfulness programs