Location

This role will be located in our San Francisco Office, preferably.

About the Role

As a Cloud Security Engineer, you will play a crucial role in designing, implementing, and maintaining security measures to protect our cloud-based infrastructure across multiple platforms including AWS, GCP, and Azure. You will work closely with our engineering and operations teams to ensure the integrity, confidentiality, and availability of our systems and data. The ideal candidate will have expertise in cloud security best practices, container security, automation tools such as Terraform, and programming languages like Golang and Python.

The Security Operations team at Opendoor focuses on identifying and protecting assets, detecting anomalies and attacks, responding to compromise, and recovering from asset compromise in order to return the business to a steady state. The scope of the Security Operations team includes Application Security, Detection Operations, Incident Response, Infrastructure Security, Penetration Testing, and Threat Intelligence.

What You'll Need

• Experience with infrastructure-as-code tools such as Terraform.
• Strong understanding of containerization technologies and container security.
• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of experience as a Cloud Security Engineer or similar role.
• Proficiency in cloud platforms such as AWS, GCP, and Azure.
• Hands-on experience with Kubernetes for container orchestration.
• Proficiency in programming/scripting languages like Golang and Python.
• Knowledge of security frameworks like CIS and NIST
• Excellent communication and collaboration skills.

What You'll Do

• Design and deploy security controls to monitor and protect cloud resources.
• Provide a paved path to Engineering teams to adopt security best practices in the cloud, container orchestration, container, and CI/CD domains
• Conduct regular security assessments and audits of cloud infrastructure and applications.
• Collaborate with development and operations teams to integrate security into the software development lifecycle (SDLC).
• Implement container security measures and ensure secure deployment and orchestration using Kubernetes.
• Automate security processes using Terraform and other infrastructure-as-code (IaC) tools.
• Respond to security incidents and perform root cause analysis to prevent future occurrences.
• Stay current with emerging threats, vulnerabilities, and security technologies in the cloud space.
• Provide guidance and support to team members on security best practices and procedures.

Bonus If You Have

• An understanding of the value of usability and buy-in when it comes to security policy and practices
• CI/CD Security expert: You have deep experience in all aspects of CI/CD security
• A love of instrumentation
• Passion for automation
• Love for security at work and outside of work. As shown by: presenting at a known security conference, contributing to or creating open source security tools, contributing to the security community in general, etc

Compensation

Our compensation reflects the cost of labor across several  U.S. geographic markets, and we pay differently based on those defined markets. Base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The U.S. pay range for this position is $143,000-179,000 annually. Pay within this range varies by work location and may also depend on your qualifications, job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. We also offer a comprehensive package of benefits including paid time off, 12 paid holidays per year, medical/dental/vision insurance, basic life insurance, and 401(k) to eligible employees.