Cloud Security Engineer

About the Company

Braintrust is the AI observability platform. By connecting evals and observability in one workflow, Braintrust gives builders the visibility to understand how AI behaves in production and the tools to improve it.

Responsibilities

• Own the security architecture for internal AWS environments and customer-deployed stacks across AWS, Azure, and GCP
• Write Terraform modules and policy code to implement secure-by-default infrastructure
• Harden Kubernetes footprint including admission controllers, network policies, and workload identity
• Build and tune detections across cloud control planes and identity providers
• Lead incident response and convert incidents into codified runbooks and durable controls
• Partner with customers on self-hosting, network architecture, and key management
• Use agentic coding workflows to automate control validation, evidence collection, and IR triage

Requirements

• 5+ years in cloud security, infrastructure security, or security engineering
• Deep AWS expertise (IAM, VPC, KMS, GuardDuty, CloudTrail)
• Working fluency in Azure or GCP
• Strong Terraform skills for IaC pipelines
• Production Kubernetes security experience
• Proficiency in Python, TypeScript, or Go
• Production incident response experience
• Familiarity with compliance regimes like SOC 2, ISO 27001, HIPAA, or FedRAMP
• Active user of agentic coding tools

Preferred Qualifications

• Experience securing self-hosted enterprise software
• Experience with multi-tenant SaaS
• Experience with LLM-heavy workloads and AI security