Staff Cloud Security Engineer

• Design and build automated security tools and DevSecOps pipelines to empower developers with self-service security guardrails.
• Drive triage and resolution of security vulnerabilities across the backend stack, including writing code to patch CVEs and architecting structural fixes.
• Serve as technical lead for hardening AWS production environments, ensuring alignment with industry standards and compliance.
• Conduct threat modeling and security architecture reviews for high-impact systems and new platform features.

This role directly protects SPAN's platform that enables home electrification and decarbonization, helping to reduce greenhouse gas emissions and slow climate change.

• 6+ years of dedicated experience in security engineering, application security, or DevSecOps.
• Expertise in securing, auditing, and hardening cloud ecosystems, with strong emphasis on AWS.
• Proficient in writing production-grade code in Python, Java, or Node.
• Understanding of authentication and authorization protocols (OIDC, SAML, OAuth).

Competitive compensation + equity grants at a well-funded, venture-backed company. Comprehensive benefits: 100% employee premiums for base plans on medical, dental, vision; parental leave up to six months. Sunny office near BART and Caltrain. Strong team culture with Employee Resource Groups, monthly social events, SPANcakes recognition breakfast, lunch and learns. Flexible hours, one holiday per month, unlimited PTO.

SPAN is mission-driven to design, build, and deploy products that electrify our built environment, decarbonize our world, and slow the effects of climate change.