Senior/Staff Engineer, Cloud & Infrastructure Security

Grow Therapy is a mental health care platform focused on making care more effective and accessible for patients and providers. The Senior/Staff Engineer, Cloud & Infrastructure Security will build and mature the company’s cloud security posture, respond to incidents, establish secure infrastructure architecture, and develop AI agents for threat detection, vulnerability management, and incident response.

Responsibilities:

• Design and build the security foundation for Grow's infrastructure as it scales
• Research the threats and attack methods most relevant to Grow's applications and infrastructure, and turn that research into real solutions
• Improve our cloud security posture in close partnership with infrastructure, engineering, and compliance
• Respond to security incidents, from critical to routine, and participate in an on call rotation
• Build defense in depth through secure by default architecture, closing gaps before they turn into incidents
• Define and track the KPIs that show whether our cloud security program is actually working
• Build and deploy AI agents that strengthen threat detection, alert triage, vulnerability management, and incident response, reasoning through problems and escalating to a human when needed

Requirements:

• • 6+ years of experience in the Cloud Security domain
• • You have deep AWS security experience: IAM, secure service configuration, CloudTrail, SCPs, AWS Organizations, Config, and similar tooling
• • You have real depth in Kubernetes security, including secure deployments, network policies, service to service auth, RBAC, workload identity, admission controllers, and runtime security
• • You're comfortable with infrastructure as code and think about the full lifecycle of a problem, not just the tool that patches it
• • You care about how your work lands on the people around you, from the patients whose data you protect to the teams you partner with, and you bring strong opinions to security design decisions
• • You've actually built and deployed production grade AI agents or agent powered tools for security work, not just experimented with or advised on them
• This role can be hybrid (onsite from our NYC, San Francisco, or Seattle hub location three days per week: Tuesday, Wednesday, Thursday) or fully remote. Both arrangements include travel 2–3 times per year (e.g., company and department offsites)