Job description
Who we are:
We are a leader in fraud prevention and AML compliance. Our platform uses device intelligence, behavior biometrics, machine learning, and AI to stop fraud before it happens. Today, over 300 banks, retailers, and fintechs worldwide use Sardine to stop identity fraud, payment fraud, account takeovers, and social engineering scams. We have raised $145M from world-class investors, including Andreessen Horowitz, Activant, Visa, Experian, FIS, and Google Ventures.
Our culture:
We have hubs in the Bay Area, NYC, Austin, and Toronto. However, we maintain a remote-first work culture. #WorkFromAnywhere
We hire talented, self-motivated individuals with extreme ownership and high growth orientation.
We value performance and not hours worked. We believe you shouldn’t have to miss your family dinner, your kid’s school play, friends get-together, or doctor’s appointments for the sake of adhering to an arbitrary work schedule.
Location:
Remote - US or Canada
From Home / Beach / Mountain / Cafe / Anywhere!
We are a remote-first company with a globally distributed team. You can find your productive zone and work from there.
About the Role:
As a Cloud Security Engineer on the DevOps team, you will design and implement guardrails that let engineers move fast while staying safe. This is a hands-on role focused on cloud platform security, automated monitoring, and developer enablement. You’ll work closely with DevOps and engineering to embed security into our infrastructure and CI/CD pipelines so that security is built-in, not bolted-on.
We’re a small, multi-hat team (DevEx, SRE, FinOps, DevSecOps), so this role combines owning core infra security with empowering dev teams through self-service golden paths.
What you’ll be doing:
Enforce secure defaults across AWS/GCP with least-privilege and zero-trust, using policies-as-code (Terraform validations, OPA/Rego/Conftest, Checkov) and cloud-native guardrails (AWS SCPs, GCP Org Policies).
Manage secrets, keys, and service accounts with short-lived credentials, automated rotation, and Cloud KMS/Vault or workload identity federation.
Build automated monitoring and alerting pipelines for cloud logs; integrate with SIEM/SOAR and support modern observability (Datadog, Splunk, OpenTelemetry).
Drive vulnerability and supply chain security by integrating IaC, container, and dependency scanning into CI/CD; support SBOMs, artifact signing, and provenance.
Apply cloud-native network security services (AWS Shield, CloudFront WAF, GCP Cloud Armor) via infrastructure-as-code.
Enable developers through paved-road tooling, docs, and knowledge sharing programs.
What you’ll need:
5+ years in cloud security engineering, DevSecOps, or similar roles.
Strong AWS or GCP experience (multi-cloud a plus).
Proficiency with Kubernetes, Terraform/OpenTofu, and CI/CD pipelines.
Familiarity with observability tooling (e.g. Datadog, OpenTelemetry).
Experience with vulnerability management or scanning tools (e.g. Snyk, Wiz, Trivy).
Programming skills in Python or Go.
Bonus: pen testing or threat modeling, fraud/compliance/payments experience, or security certifications (AWS Security Specialty, CKA/CKS, CISSP, OSCP).
Compensation: Base pay range of $140,000 - 170,000 USD / $175,000 - 215,000 CAD + Series C equity with tremendous upside potential + Attractive benefits
The compensation offered for this role will depend on various factors, including the candidate’s location, qualifications, work history, and interview performance, and may differ from the stated range.
Benefits we offer:
Generous compensation in cash and equity
Early exercise for all options, including pre-vested
Work from anywhere: Remote-first Culture
Flexible paid time off, Year-end break, Self care days off
Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific
4% matching in 401k / RRSP - US and Canada specific
MacBook Pro delivered to your door
One-time stipend to set up a home office — desk, chair, screen, etc.
Monthly meal stipend
Monthly social meet-up stipend
Annual health and wellness stipend
Annual Learning stipend
Unlimited access to an expert financial advisory
Join a fast-growing company with world-class professionals from around the world. If you are seeking a meaningful career, you found the right place, and we would love to hear from you.
To learn more about how we process your personal information and your rights in regards to your personal information as an applicant and Sardine employee, please visit our Applicant and Worker Privacy Notice .
