Perplexity is seeking a highly experienced Cloud Security Engineer to build and maintain secure, scalable cloud infrastructure. This role involves embedding security into development workflows, enforcing compliance, and enabling secure innovation across cloud environments.
What You'll Do
- Partner with infrastructure and engineering teams to embed security into development workflows and promote secure-by-default patterns
- Build Terraform modules with built-in security guardrails, such as logging, encryption, and automated threat detection enablement
- Deploy cloud-native detection capabilities using AWS GuardDuty, Security Hub, and custom detection rules to identify credential compromise, crypto-mining, and lateral movement
- Maintain SOC 2 Type II and ISO 27001 compliance through automated collection of cloud control evidence
- Conduct security audits of cloud resource configurations using tools like AWS Config and Open Policy Agent, and remediate deviations from CIS Benchmarks and our internal security policies
- Secure CI/CD and supply chain pipelines by implementing controls such as artifact signing, secret scanning, and dependency monitoring
- Apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments
- Participate in the security on-call rotation and respond to security alerts and incidents to ensure rapid mitigation and root cause analysis
What We're Looking For
- 8+ years of experience in Cloud Infrastructure, Platform Engineering, or similar roles
- Proven track record of building and scaling infrastructure at high-growth technology companies
- Deep understanding of cloud-native architectures, microservices, and distributed systems
- Experience securing CI/CD pipelines, deployment automation, and internal tooling
- Strong programming skills in Python, Go, or similar languages
Nice to Have
- Experience with AI/ML infrastructure and multi-cloud environments
Technical Stack
- Terraform
- AWS GuardDuty
- Security Hub
- AWS Config
- Open Policy Agent (OPA)
- Python
- Go
- CI/CD pipelines
- cloud-native architectures
- microservices
- distributed systems
- artifact signing
- secret scanning
- dependency monitoring
- zero trust
- SOC 2 Type II
- ISO 27001
- CIS Benchmarks
