Staff Site Reliability Engineer, Security
Core
Building a cloud security program and automation tooling for GCP/GKE environments to harden CI/CD supply chains and manage vulnerabilities.
Role type
Staff Site Reliability Engineer (Security)
Builds
Cloud Security Posture Management, Vulnerability & Dependency Management workflows, Security Solutions Engineering (Terraform modules, scanners)
Domain
Cloud Security, Site Reliability Engineering, Supply Chain Security
Deliverable
infrastructure
Required skills
GCP/GKE security hardening, Dependabot configuration, CI/CD supply chain hardening, Cloud Security Posture Management (CSPM), Infrastructure-as-Code (Terraform), Python/Go/Shell scripting, Systems-level technical fluency
Preferred skills
Container image scanning, DAST/network scanning, Cloudflare edge security, Detection engineering on GCP
Technologies
GCP, GKE, Terraform, GitHub Actions, Dependabot, Cloud Armor, Cloudflare, Istio, BigQuery
Responsibilities
Assess and harden GCP footprint (GKE, IAM, Cloud Armor) and codify baselines in Terraform; Establish and automate vulnerability and dependency remediation workflows; Build security capabilities (modules, policies, automation) for the broader SRE team; Integrate scanners into CI/CD pipelines; Partner cross-functionally on app security and compliance evidence.
Seniority
Staff, hands-on IC with program ownership