Arena is hiring

Software Engineer - Staff Cloud Security Engineer

Design the cloud identity model for workloads, including least-privilege IAM, workload identity
Own machine secrets and rotation end to end, ensuring every machine credential has an owner, a home
Set the rules for what each environment and service may reach, including limits on outbound
Build security detections and alerts for high-risk changes to cloud infrastructure and build
Build cloud security checks into infrastructure code and build pipelines so the secure path is the
Secure machine credentials and permissions used by source control, build pipelines, and cloud

6+ years in security or infrastructure engineering, with at least 3 focused on cloud security in
Deep, current, hands-on experience securing AWS, GCP, and Cloudflare
Owned cloud security, making calls about how IAM and secrets should work, defending them, and
Real depth in workload identity: OIDC, workload identity federation, IAM design, and secret
Rotation actually run: can walk through rotating a production database or API credential without an
Detection and response in the cloud: written detections, been paged by them, and investigated a

Competitive compensation aligned to the markets where team members are based, depending on
Comprehensive health and wellness benefits, including medical, dental, vision, and additional
Opportunity to work on cutting-edge AI with a small, mission-driven team
Culture that values transparency, trust, and community impact

More jobs at Arena