Cloud Security Engineer

<h1>A little about us</h1><p style="min-height:1.5em"><a target="_blank" rel="noopener noreferrer nofollow" href="http://incident.io">incident.io</a> is the AI software reliability platform trusted by engineering teams at Netflix, Etsy, and 2,000+ companies who can't afford downtime.</p><p style="min-height:1.5em">The stakes are real, the talent is insane, and somehow it's a genuinely lovely place to work. We all pull our weight, go the extra mile, and put in the bit of magic most companies don't have time for, all while having fun and never taking ourselves too seriously.</p><p style="min-height:1.5em">We've raised $100+ million from Index Ventures, Insight Partners, and Point Nine, and we're growing fast. There's never been a better time to join.</p><p style="min-height:1.5em"></p><p style="min-height:1.5em"><strong>The role in one line</strong></p><p style="min-height:1.5em">Being a Cloud Security Engineer at incident means being the person who keeps the one thing customers rely on when their systems are on fire both up and safe, turning “is this secure?” into “yes, and here’s the proof.”</p><p style="min-height:1.5em"><strong>What that looks like day to day</strong></p><p style="min-height:1.5em">As a Cloud Security Engineer at incident, you own the security of the cloud infrastructure that runs our platform: how it’s built, hardened, monitored and defended. It’s a genuinely varied role. One day you’re tightening IAM across our Google Cloud projects, the next you’re building a Terraform guardrail so engineers get a safe path instead of a ticket, the next you’re leading an investigation into something odd in the audit logs.</p><p style="min-height:1.5em">You’ll own cloud posture and hardening across GCP and GKE, identity and access, security as code in our Terraform and CI/CD pipelines, detection and response, isolation of customer data in our multi-tenant platform, and the cloud-side controls around our AI features.</p><p style="min-height:1.5em">We formed our security team this year and there are three of us. We’re hiring a Cloud Security Engineer to give the team real depth in cloud, which means little process, no approval chains, and your fingerprints on everything. We say yes wherever we genuinely can, and you’ll have the authority to block a release when it matters.</p><p style="min-height:1.5em">We run on Google Cloud and AWS, with Kubernetes, Terraform, Go, Postgres and TypeScript/React. We lean on Claude and other LLMs to move faster.</p><p style="min-height:1.5em"><strong>Who you are</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">You’ve got deep, hands-on cloud security experience, ideally on Google Cloud. Strong AWS or Azure depth that transfers is fine.</p></li><li><p style="min-height:1.5em">You design least-privilege IAM properly, and you’ve secured Kubernetes or container platforms in production.</p></li><li><p style="min-height:1.5em">You write code to fix problems, not just report them. Terraform is second nature.</p></li><li><p style="min-height:1.5em">You’ve built cloud detection or investigated cloud incidents, and you enjoy following the thread until you find the answer.</p></li><li><p style="min-height:1.5em">You can give hard feedback to an engineer and have them thank you for it.</p></li><li><p style="min-height:1.5em">You’re comfortable with high autonomy. Nobody’s going to hand you a detailed spec, you’re trusted to figur