About the RoleHelp protect Nscale's cloud platforms, hyperscale GPU clusters, and production environments. As a Security Engineer II in our Cloud & Platform Security team, part of the CISO organization, you'll investigate real findings and incidents, separate meaningful risk from noise, and work with engineering to resolve the causes.
This is a hands-on cloud-security, detection, and response role. You'll review cloud posture, triage production threats, improve the telemetry needed to investigate them, and turn incident findings into lasting improvements in controls and coverage.
What you'll be doingCloud posture and findings review- Review findings from cloud security posture management (CSPM) and cloud-security tooling across our cloud platforms and GPU infrastructure.
- Validate findings against live environments, assess technical and business impact, and assign severity so teams address the right risks first.
- Partner with platform, infrastructure, and engineering teams to drive remediation and track findings to closure.
- Identify recurring misconfigurations and exposure patterns, address their systemic causes, and establish guardrails that make systems secure by design.
Production threat triage- Triage security alerts and threats in production, determining what's real, how urgent it is, and its potential blast radius.
- Own classification, enrichment, and escalation into incident response when warranted, involving system owners to understand the architecture and impact.
- Keep clear records of what you observed, what you decided, and why.
- Feed lessons back into detections and runbooks so future alerts are easier to assess and act on.
Log and telemetry coverage- Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services.
- Identify missing sources, fields, or retention, and work with platform and engineering teams to close coverage gaps.
- Help ensure security-relevant telemetry reaches logging and SIEM pipelines reliably and supports detection and investigation.
- Contribute to detections and alerting, prioritising signal quality over volume.
Forensics and investigation- Reconstruct incidents, establish scope and impact, and determine whether findings are exploited, exploitable, or false alarms.
- Perform host, container, and cloud forensics, using timelines, artefacts, and evidence to support incident response and root-cause analysis.
- Contribute to blameless post-incident reviews and translate lessons into stronger controls, better coverage, and improved processes.
- Maintain detailed investigation and resolution records for audit and compliance purposes.
KPIs- Time to validate, prioritise, and resolve cloud posture findings and production alerts
- Reduction in recurring misconfiguration and exposure types
- Log and telemetry coverage across critical cloud, platform, and production systems
- Quality and timeliness of investigations and post-incident improvements
About You- 2-5 years of security experience, with hands-on work in security operations, cloud security, detection and response, or incident response and forensics.
- Practical experience triaging findings and alerts, with the judgement to distinguish real risk from noise.
- Working knowledge of cloud security and posture management in AWS, GCP, or Azure, including common infrastructure misconfigurations and exposures.
- Familiarity with logging, SIEM, and detection tooling, and the telemetry needed to detect and investigate threats.
- Exposure to incident response and digital forensics, including timelines, evidence handling, and root-cause analysis, with an eagerness to deepen that expertise.
- Comfort working with and investigating Kubernetes, containers, Linux, and APIs.
- Clear written communication: findings, severity assessments, and actionable next steps for engineers and leadership.
- A collaborative approach and ownership of findings through resolution, working with engineering to fix root causes.
Nice to have- Experience with GPU/HPC or large-scale multi-tenant cloud infrastructure.
- Python, Go, or Bash scripting and automation to reduce repetitive work and scale investigations.
- Exposure to CSPM tooling, cloud-native detection, container/Kubernetes security, and identity and access management.
- Relevant certifications, such as GCIH, GCFA, GCIA, or cloud security certifications. These are welcome but not required.
What we can offer youAt Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.
- Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
- Join one of the fastest-growing AI infrastructure companies - your chance to directly shape how global AI capacity is planned and deployed. •
- Expect a dynamic progression plan tailored to your ambitions. Grow by owning critical security work and developing deep detection, response, and forensics expertise - always with our full support.
- Human-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.
