Cloud Security Engineer

About this role

Braintrust seeks a senior Cloud Security Engineer to secure its multi-cloud AI observability platform across AWS, Azure, and GCP. You'll own infrastructure hardening, build security-by-default controls in Terraform and Kubernetes, manage detections and incident response, and partner with customers on self-hosted deployments.

What you'll do

• Own security architecture for internal AWS and customer-deployed multi-cloud stacks
• Write Terraform modules and policies to make secure infrastructure the default
• Harden Kubernetes deployments including admission controllers, network policies, and runtime detections
• Build and maintain detection systems across cloud control planes with strong signal-to-noise ratio
• Lead incident response, turn incidents into durable controls and runbooks
• Support customers on self-hosting, compliance, and deployment architecture

What they're looking for

• AWS (IAM, VPC, KMS, GuardDuty, CloudTrail)
• Terraform and infrastructure-as-code security
• Kubernetes security and cluster hardening
• Python, TypeScript, or Go
• Multi-cloud platforms (Azure or GCP)
• Incident response and threat detection
• Compliance frameworks (SOC 2, ISO 27001, HIPAA, FedRAMP)
• Agentic AI coding tools

Benefits

• Medical, dental, and vision insurance
• Daily lunch, snacks, and beverages
• Flexible time off
• Competitive salary and equity
• WiFi and cellphone stipend