Startups · AI

Senior Cloud Security Engineer

Tessera Labs · Remote in the U.S. · Remote

← All jobs
About Tessera Labs

Tessera compresses ERP modernization from years to weeks with governed, multi-agent AI. Backed by a16z.

About the role

We're hiring a Senior Cloud Security Engineer to make our cloud environments secure by default. You'll design and build the guardrails, automation, and detection that keep our infrastructure defensible across multiple cloud providers. You'll do it with a DevOps mindset: writing code, shipping changes through the same pipelines our engineers use, and building paved roads teams want to adopt, rather than handing down policy from the outside. Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • A DevOps foundation — you've worked in a DevOps, Site Reliability Engineering (SRE), or platform engineering role, and you've built and operated production infrastructure and CI/CD pipelines yourself, not just reviewed them
  • Hands-on production experience securing at least two major cloud providers (AWS, GCP, or Azure), and a clear understanding of how their identity, networking, and logging models differ
  • Deep knowledge of cloud security best practices — for example, the Center for Internet Security (CIS) Benchmarks and each provider's security foundations guidance — and the judgment to apply them pragmatically rather than as a checklist
  • Strong coding and scripting skills in at least one general-purpose language (for example, Python or Go) plus shell scripting, you write automation other engineers can read and maintain
  • Hands-on experience with IaC (for example, Terraform or OpenTofu) and with embedding security checks into it
  • Strong communication skills — you work directly with engineers and can explain risk in terms they'll act on
More about this role

We're hiring a Senior Cloud Security Engineer to make our cloud environments secure by default. You'll design and build the guardrails, automation, and detection that keep our infrastructure defensible across multiple cloud providers.

You'll do it with a DevOps mindset: writing code, shipping changes through the same pipelines our engineers use, and building paved roads teams want to adopt, rather than handing down policy from the outside.

This role partners closely with platform and infrastructure engineering, customer support, and delivery teams, as well as IT and compliance.

Own the security posture of our cloud environments across Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure, applying consistent controls across providers.

Design secure reference architectures and reusable patterns — account and project structure, network segmentation, encryption and key management, secrets management — that teams can adopt instead of reinventing.

Build security into Infrastructure as Code (IaC) through hardened modules, policy as code, and pre-deploy checks, so misconfigurations are caught before they reach production.

Secure Continuous Integration / Continuous...

Read the full posting on Tessera Labs's site ↗

Center of Excellence

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.