Senior Security Engineer (Cloud Security)

Join PagerDuty as a Senior Security Engineer in the Cloud Security team. In this role, you will build and operate security-focused systems to protect PagerDuty's multi-account AWS environment and Kubernetes platforms. You will harden the platform, design least-privilege identity and workload identity, and shape detection strategy for Kubernetes and identity. You will also partner with 30+ engineering teams to unblock them securely and own Kubernetes and container security end to end.

Concevoir et mettre en œuvre des systèmes de sécurité pour protéger l'environnement AWS multi-comptes de PagerDuty et les plateformes Kubernetes.

We encourage you to submit your resume even if you don't meet every requirement. We value potential and consider each candidate's full professional story. Whether you're exploring a career change or taking your next step, we look forward to reviewing your application. If this just isn’t the right role or time - sign up for job alerts!

Responsibilities

• Renforcer la plateforme, concevoir une identité de moindre privilège et façonner la stratégie de détection pour les domaines de responsabilité.
• Collaborer avec plus de 30 équipes d'ingénierie pour débloquer les obstacles de manière sécurisée et assurer la validation des contrôles.
• 5+ years in security engineering with deep, hands-on expertise securing Kubernetes and containerized environments — EKS, Kubernetes RBAC, admission control (e.g., OPA/Gatekeeper or Kyverno), network policy, workload identity (IRSA/pod identity), container runtime/image security, and a service mesh such as Istio
• Hands-on expertise in PKI and cryptography — certificate lifecycle/management, TLS/mTLS, key management and rotation (AWS KMS or similar HSM/KMS), and encryption at rest and in transit

Requirements

• Experience with incident response and on-call, a builder's mindset toward AI/agentic tooling to accelerate security work, and a track record of scoping ambiguous projects and driving them to completion with high ownership
• Ability to automate security controls as code (Kubernetes policy-as-code) and inform detection strategy in a modern SIEM (e.g., CrowdStrike NG-SIEM, Splunk), including threat hunting within your domains
• Strong software engineering background — years building and operating production systems at scale, with the ability to design and ship security-focused platforms, services, and tooling as a developer (not just configure them). Proficiency in Python and/or Go (or similar) and Infrastructure as Code (Terraform)
• Deep expertise with AWS security services and least-privilege IAM/PAM — IAM family, Organizations/SCPs, Secrets Manager, KMS, GuardDuty, CloudTrail, and Config
• Hands-on hardening to CIS Benchmarks and DISA STIGs within a FedRAMP (or similar) program; familiarity with NIST CSF, SOC 2, or ISO 27001; and experience partnering with AppSec and GRC teams to produce compliance evidence
• Cloud-native security tooling such as Wiz (CNAPP/Threats) and CrowdStrike Falcon runtime protection; Azure security exposure (Entra ID, Defender for Cloud) a plus

Preferred

• Experience building agentic or AI-assisted security automation, and familiarity with securing AI/ML or agentic workloads running on cloud and Kubernetes infrastructure
• Demonstrated mentoring, strong written and verbal communication, and working knowledge of PagerDuty's Incident Management and Process Automation products