jobapplier

Senior Software Engineer - Cloud & Platform Security

Pronto

Skills

Required

  • cloud / infrastructure / platform security
  • network segmentation
  • mTLS
  • authentication
  • Vault
  • cloud KMS
  • Kubernetes environments
  • API security
  • OAuth / OIDC
  • authorization design
  • coarse-grained
  • fine-grained authorization models
  • secrets-management systems

Preferred

  • service mesh security
  • Istio
  • service identities
  • design reviews
  • identify security requirements
  • Kubernetes security controls

About Pronto

Ready to join us as we serve those who serve others?

Responsibilities

  • Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
  • Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
  • Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
  • Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
  • Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
  • Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.

Requirements

  • 5+ years of experience in cloud, infrastructure, or platform security.
  • Hands-on experience working with production Kubernetes environments.
  • Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
  • Experience designing or reviewing both coarse-grained and fine-grained authorization models.
  • Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
  • Experience managing or securing non-human identities and service-to-service access.
  • Strong understanding of network segmentation and access boundaries in cloud environments.
  • Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Preferred

  • Experience securing real-time or low-latency control-plane systems.
  • Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.

Pay

  • The base salary range for this role is $167,000 - $230,000 per year.
  • Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications.
  • Base salary is just one part of your total rewards package.
  • You may also be eligible for equity awards.

Benefits

  • Work on real, production-deployed autonomy.
  • Build technology that directly improves safety, efficiency, and productivity.
  • Tackle complex challenges in demanding, real-world environments.
  • Be part of a fast-moving team with high ownership and impact.
  • See your work deployed and making a difference in the field.
  • Collaborate closely with experienced engineers and industry operators.
  • Medical, Dental, Vision, Disability, and Life Insurance
  • Flexible Spending Account / Health Savings Account Options
  • 401(k)
  • Equity
  • Sick Time, Unlimited Flexible Time Off, and Paid Holidays
  • Paid Parental Leave

Pre-Tax Commuter Benefit Plan

  • Team lunch in our SoMa office every Tuesday and Thursday
  • Benefits are subject to change at the company's discretion.

Work location

  • This role is based in our San Francisco office.
  • Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate.
  • We do our best work together.
  • That’s why all of our office-based teams work onsite, five days a week.

Applications

Pronto accepts applications on an ongoing basis.