Staff Cloud Security Engineer

ABOUT THE ROLE Hi, I’m Alexa https://www.linkedin.com/in/alexayiouroukis/, Platform Security Manager at Jane, and I’ve been here for just over a year. I’m looking for a Staff Cloud Security Engineer to join our growing team. Together with the Enablement group, I’ve built a lot of what this role will now own: our cloud posture practice on Wiz, the security guardrails in CI, the centralized container image platform, and the controls around how Jane runs AI agents. I’ve now moved into managing the team full time, and I’m excited to backfill my role with the person who takes it further than a single finding and becomes the technical anchor for cloud, devops, and AI platform security at Jane. I look for people who treat security as a partnership, not a gate, and who want real ownership of hard problems. This role offers both. You’ll own hardening of the AWS, Kubernetes, and delivery infrastructure that runs Jane and protects the health information thousands of clinics trust us with. Platform Security is a small team with a big mandate: security should be inherited from the platform, not reimplemented by every team. We own cloud and infrastructure security, workload and runtime security, the software supply chain, the developer security platform, enterprise security, detection engineering, and the security of Jane’s AI and MCP platform. The cloud side of our 2027 roadmap is yours to hold, and you’ll sit in design conversations with Infrastructure & Enablement and Jane AI as a peer. The platform exists and the work is real. What we need is someone who sets the quality bar high, gets buy-in from the teams who run the platform, and ships controls that hold without significant friction. At Jane, Staff sits at the same organizational level as a manager on the IC track. You’re the team’s technical anchor: you help decide which problems are worth solving, shape the medium-term technical strategy, write the design docs and decision records that set direction, and lead others through delivery and long-term ownership. You’ll be measured on team outcomes over a 6 to 12 month horizon rather than on tickets closed. You’ll report to me, work daily with the rest of Platform Security, and partner closely with Product Security. AI is core to how this team works, not a buzzword. Jane is building AI-native healthcare software, and the security function is building at scale alongside it. You’ll help set the guardrails for how Jane’s engineers and agents change infrastructure, and you’ll be expected to use the same tools yourself. The team experiments continuously with AI and shares what we learn openly. If you think in systems, would rather build a paved path than write a policy, and want to set direction rather than follow it, we’d love to hear from you. WHAT IMPACT WE’RE LOOKING FOR YOU TO MAKE - Own Jane’s cloud security architecture: audit our network controls, lead egress hardening, and build guardrails for workload identity and secrets management, sequencing the path with Enablement teams. - Harden Kubernetes as a platform: lead network segmentation, CIS benchmark hardening, and admission policy on EKS, and turn Wiz runtime findings into enforced policy blocks rather than an alert queue. - Run the container supply chain and CI end to end: contribute to our centralized base images with signing and provenance for every image and SBOM coverage you can actually query, and make CI and GitHub safe by default through rulesets, required workflows, OIDC-only cloud access from pipelines, and runner isolation, so application teams own their own patching and AI coding agents can open pull requests without being able to touch the controls themselves. - Define identity for agentic workloads with Jane AI and Developer Acceleration: non-human identity for agents under zero trust, entitlement sprawl reined in across AWS, and hardened runtimes for the environments agents execute in. This is the critical path for how fast Jane can take AI to market safely, and we’ve already started building this paved path, but it needs continuous attention and awareness. - Be Security’s voice in design, sitting in Cloud Engineering, Infrastructure & Enablement, and Jane AI design reviews with equal footing, and multiply the team: mentor the engineers on Platform Security and our security champions, help hire, and share the on-call rotation with the rest of us. WHAT EXPERIENCE WE NEED - 7 or more years in security or platform engineering, with a track record of owning the security architecture of a multi-cloud estate rather than contributing to it. IAM, networking, compute, and storage should all be comfortable ground, and you read and write Terraform fluently enough to review other teams’ modules. - Production Kubernetes security depth: you’ve hardened EKS or equivalent in production across RBAC, network policy, admission controllers, runtime detection, and benchmark hardening, and you know which controls hold under real workloads and which only look good in a slide. You’ve also operationalized a CNAPP such as Wiz or Prisma Cloud, turning findings into developer-facing workflows, managing false positive rates, and measuring whether posture actually improved rather than just accumulating alerts. - Software supply chain and CI/CD security at organizational scale: you’ve built or owned image pipelines, signing and provenance, SBOM programmes, and GitHub Actions security across many repositories, and you’ve closed the paths by which a compromised dependency or pipeline reaches production. - Software development skill that earns trust with engineers. You build the tooling and automation other teams use, in Python, Go, Ruby, or TypeScript, and your code is how you make the secure path the easiest one. - A track record of cross-team design authority: you’ve led architecture decisions that spanned teams you didn’t manage, written the design documents and decision records behind them, influenced through credibility rather than mandate, and mentored engineers at several levels along the way. If you don’t meet every single qualification but are excited about this role, we’d still love to hear from you. MORE ABOUT JANE Jane is a founder-led, high-growth SaaS company with a remote-first team working across Canada, the US, and the UK, united by our mission to help the helpers. We build the products and tools that thousands of clinics rely on every day to run their businesses, care for their patients, and grow their communities. That level of impact means every person at Jane plays an important role in how we show up for our customers. We’re all responsible for being deeply connected to their needs, obsessed with improving their experience, and proud of the difference our work makes in their day-to-day lives. Jane is growing fast, and that growth brings exciting challenges that call for adaptability, resilience, learning agility, and humility. We’re proud of what we’ve built and quick to admit what we don’t know yet. We listen, learn, and adjust as we go. More than 70,000 businesses run on Jane which has 250,000+ practitioners interacting with our product on a daily basis and growth is continuing to accelerate. We’re also embracing the possibilities of AI, using it to work smarter, improve our systems, and create even better experiences for our customers and our team. No matter your role or team, we expect every Janer to be curious, experimenting, and finding new ways to build with AI. We’ll make sure you have the tools, support, and space to explore, learn, and share what you discover along the way. Our goal isn’t just delivery - it’s delight. We move quickly, communicate openly, and solve real problems together. If you’re energized by ambiguity, motivated by impact, and eager to learn with others, you’ll thrive at Jane. COMPENSATION & BENEFITS At Jane, we’re committed to paying fairly, clearly, and above all, paying for growth. This role has an annual salary range of $158,400 to $247,500. While that is a large range, it is intentional. It reflects the full growth journey someone might take in the role, from developing skills early on to becoming highly proficient and ultimately achieving excellence. We believe in paying for growth. You’ll have regular career development conversations with your manager, and your compensation will grow as you gain experience and contribute meaningfully to our mission. Paying clearly is one of our compensation fundamentals. Watch this https://vimeo.com/880258361 short video to learn how our salary bands are set. You’re also encouraged to ask questions about compensation at any point during the interview process. We also offer a comprehensive benefits package. You can learn more about it here https://jane.app/documents/hiring/jane_benefits_overview.pdf! HOW WE READ APPLICATIONS - We use AI to help review applications, and people on our team make the decisions about who moves forward - not AI. - There’s no need to match our posting’s wording or hunt for keywords. We’d much rather hear about your own work in your own words. - For the things we’re looking for, it helps most to see one or two real examples: what the project was, what your role was, the tools you used, and what changed because of it. - Short and plain is perfectly fine. Reusing our posting’s language back to us doesn’t show us how you work, but your own examples do. Jane takes job scams and candidate fraud seriously. Jane will only contact you from an @jane.app http://jane.app email address. We'll never contact you from a personal email, ask for payment, or request purchases during the hiring process. If something doesn't seem right, please reach out to us at [email protected] before sharing any personal information.