Staff Cloud Security Engineer

SPAN is a mission-driven company focused on electrifying the built environment and decarbonizing the world. They are seeking a hands-on, autonomous Staff Cloud Security Engineer to drive the technical execution of SPAN’s software security initiatives, including developing security tools and hardening cloud environments.

Responsibilities:

• Design and build automated security tools, paving the way for self-service security guardrails that empower developers without sacrificing velocity
• Drive the triage and resolution of security vulnerabilities across our backend stack—directly writing code to patch CVEs yourself when needed, while partnering with engineering teams to architect broader, deeper structural fixes
• Serve as the technical lead for hardening our AWS production environments, ensuring top-tier alignment with modern industry standards and compliance
• Conduct deep-dive threat modeling and security architecture reviews for high-impact, complex systems and net-new platform features

Requirements:

• 6+ years of dedicated experience in security engineering, application security, or DevSecOps
• Understanding of authentication and authorization protocols (OIDC, SAML and OAuth)
• Expertise in securing, auditing, and hardening cloud ecosystems, with a strong emphasis on AWS environments
• Experience balancing tactical, fast-paced vulnerability patching with strategic, framework-level remediation alongside development teams
• Proficient in writing production-grade code in at least one of our core backend languages: Python, Java or Node