We are seeking a highly skilled Sr. Cloud Security Engineer to join our Security Operations and Engineering team. In this role, you will be a key player in designing, implementing, and maintaining a robust security posture across our multi-cloud environment.
While your primary expertise should lie in Google Cloud Platform (GCP) or Microsoft Azure, you will also leverage your experience in Amazon Web Services (AWS) to ensure consistent security standards across our entire infrastructure. You will be instrumental in automating security controls, conducting deep-dive architectural reviews, and managing our Cloud Security Posture Management (CSPM) lifecycle.
What You'll Do- Cloud Security Architecture & Design: Lead and participate in security reviews for new product features and infrastructure changes. Provide actionable recommendations to engineering teams to ensure "secure by design" principles.
- Posture Management (CSPM): Own the end-to-end CSPM process. This includes configuring tools, monitoring for misconfigurations, prioritizing risks, and working with stakeholders to remediate security gaps across GCP, Azure, and AWS.
- Security Automation: Utilize basic programming and scripting skills (e.g., Python, Go, or Bash) to automate repetitive security tasks, incident response playbooks, and compliance checks.
- Infrastructure as Code (IaC) Security: Integrate security scanning into CI/CD pipelines (Terraform, Pulumi, or Bicep) to catch vulnerabilities before they reach production and also write IAC code for security related infrastructure.
- Identity & Access Management (IAM): Design and enforce least-privilege access models across multi-cloud environments, managing service accounts, roles, and identity federation.
- Incident Response Support: Act as a subject matter expert during cloud-related security incidents, providing technical analysis and forensic support.
- Deep Cloud Expertise: 5+ years of experience in cloud security, with extensive, hands-on experience in either GCP (Security Command Center, IAM, VPC Service Controls) or Azure (Microsoft Defender for Cloud, Azure Policy, Sentinel).
- Multi-Cloud Proficiency: Strong working knowledge of AWS security services (GuardDuty, IAM, Security Hub, Config).
- CSPM Experience: Proven track record of managing Cloud Security Posture Management tools (e.g., Wiz, Orca, Prisma Cloud, or native cloud tools) to reduce the attack surface.
- Programming Skills: Ability to write scripts or small applications in Python, Go, or PowerShell to interact with Cloud APIs, automate workflows, and maintain security related IAC code.
- Security Reviews: Experience performing threat modeling and security architecture reviews for complex, distributed systems.
- Relevant certifications such as Google Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer Associate (AZ-500), or AWS Certified Security – Specialty would be great plus
- Experience with container security (Kubernetes/GKE/AKS/EKS).
- Familiarity with compliance frameworks such as PCI DSS,SOC2, ISO 27001, or NIST.
- Excellent communication skills with the ability to translate complex security risks into business context for non-technical stakeholders.
Top Skills
What the Team is Saying
What We Do
Navan (Nasdaq: NAVN) is the leading all-in-one business travel, payments, and expense management platform that makes travel easy for frequent travelers. From finding flights and hotels to automating expense reconciliation, with 24/7 support along the way, Navan delivers an intuitive experience travelers love and finance teams rely on. See how Navan customers benefit and learn more at navan.com.
Why Work With Us
At Navan, we’re never satisfied with the status quo, and we know breakthrough ideas come from diverse perspectives. We are committed to cultivating a workplace that reflects the diversity of the customers we serve while fostering leadership and innovation.
Gallery
Navan Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
In-person connections is the foundation of Navan, the connections forged through face-to-face interactions improve company culture and what we can achieve together. We operate on a hybrid working model, which we define as four days a week in-office.
.png)
