{"schemaVersion":"jobsearcher.job.v1","id":"f77dc635d592c6ac769f13df","url":"https://jobsearcher.com/jobs/f77dc635d592c6ac769f13df","canonicalUrl":"https://jobsearcher.com/jobs/f77dc635d592c6ac769f13df","title":"Senior Software Engineer - Cloud & Platform Security","description":"Who we arePronto AI is a global leader in commercializing autonomous vehicle (AV) technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. While much of the industry remains in R&D, we deliver real, production-ready autonomy that is already operating in the field. We are on a mission to make mining operations safer, smarter, and more efficient through cutting‑edge technology, and we are building toward becoming the world’s first profitable AV technology company.\r\nWhat you’ll doAs a Senior Software Engineer focused on Cloud & Platform Security, you’ll work directly with our Infrastructure team to secure the systems that manage and control our fleet. Rather than duplicating the team’s existing cloud and Kubernetes ownership, you’ll bring deep security expertise across identity, secrets, network segmentation, and the fleet‑management and remote‑vehicle‑control APIs that represent some of the highest‑impact systems in our environment.\r\nDesign and enforce least‑privilege access across cloud environments, with a focus on service identities and other non‑human access.\r\nStrengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.\r\nThreat model and review fleet telemetry, dispatch, and remote‑vehicle‑control APIs, including authentication, authorization, rate limiting, and replay protection.\r\nDesign and improve network segmentation to isolate fleet‑management, dispatch, and remote‑control systems from corporate and consumer‑facing environments.\r\nPartner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.\r\nReview and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.\r\nWhat we’re looking forWe’re looking for a hands‑on security engineer who can work as an embedded partner to an experienced Infrastructure team. You should be comfortable going deep on cloud and platform security, influencing technical decisions, and helping engineers build secure systems without operating as a gatekeeper.\r\nBasic qualifications5+ years of experience in cloud, infrastructure, or platform security.\r\nHands‑on experience working with production Kubernetes environments.\r\nStrong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.\r\nExperience designing or reviewing both coarse‑grained and fine‑grained authorization models.\r\nExperience with secrets‑management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.\r\nExperience managing or securing non‑human identities and service‑to‑service access.\r\nStrong understanding of network segmentation and access boundaries in cloud environments.\r\nDemonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.\r\nNice to haveExperience securing real‑time or low‑latency control‑plane systems.\r\nFamiliarity with service mesh security and workload‑to‑workload mTLS using Istio or similar technologies.\r\nWhy join usWork on real, production‑deployed autonomy.\r\nBuild technology that directly improves safety, efficiency, and productivity.\r\nTackle complex challenges in demanding, real‑world environments.\r\nBe part of a fast‑moving team with high ownership and impact.\r\nSee your work deployed and making a difference in the field.\r\nCollaborate closely with experienced engineers and industry operators.\r\nWhat else you need to knowThis role is based in our San Francisco office. Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate. We do our best work together. That’s why all of our office‑based teams work onsite, five days a week.\r\nThe base salary range for this role is $167,000 - $230,000 per year. Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications. Base salary is just one part of your total rewards package. You may also be eligible for equity awards.\r\nBenefits Summary (USA Full‑Time Exempt Employees):\r\nMedical\r\nDental\r\nVision\r\nDisability\r\nLife Insurance\r\nFlexible Spending Account / Health Savings Account Options\r\n401(k)\r\nEquity\r\nSick Time\r\nUnlimited Flexible Time Off\r\nPaid Holidays\r\nPaid Parental Leave\r\nPre‑Tax Commuter Benefit Plan\r\nTeam lunch in our SoMa office every Tuesday and Thursday\r\nBenefits are subject to change at the company's discretion.\r\nPronto accepts applications on an ongoing basis.#J-18808-Ljbffr","company":"Cssmerge","rawCompany":"cssmerge","city":"Millbrae","state":"CA","isRemote":false,"isActive":false,"createdAt":"2026-11-04T02:37:31.202Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Senior Software Engineer - Cloud & Platform Security","description":"Who we arePronto AI is a global leader in commercializing autonomous vehicle (AV) technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. While much of the industry remains in R&D, we deliver real, production-ready autonomy that is already operating in the field. We are on a mission to make mining operations safer, smarter, and more efficient through cutting‑edge technology, and we are building toward becoming the world’s first profitable AV technology company.\r\nWhat you’ll doAs a Senior Software Engineer focused on Cloud & Platform Security, you’ll work directly with our Infrastructure team to secure the systems that manage and control our fleet. Rather than duplicating the team’s existing cloud and Kubernetes ownership, you’ll bring deep security expertise across identity, secrets, network segmentation, and the fleet‑management and remote‑vehicle‑control APIs that represent some of the highest‑impact systems in our environment.\r\nDesign and enforce least‑privilege access across cloud environments, with a focus on service identities and other non‑human access.\r\nStrengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.\r\nThreat model and review fleet telemetry, dispatch, and remote‑vehicle‑control APIs, including authentication, authorization, rate limiting, and replay protection.\r\nDesign and improve network segmentation to isolate fleet‑management, dispatch, and remote‑control systems from corporate and consumer‑facing environments.\r\nPartner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.\r\nReview and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.\r\nWhat we’re looking forWe’re looking for a hands‑on security engineer who can work as an embedded partner to an experienced Infrastructure team. You should be comfortable going deep on cloud and platform security, influencing technical decisions, and helping engineers build secure systems without operating as a gatekeeper.\r\nBasic qualifications5+ years of experience in cloud, infrastructure, or platform security.\r\nHands‑on experience working with production Kubernetes environments.\r\nStrong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.\r\nExperience designing or reviewing both coarse‑grained and fine‑grained authorization models.\r\nExperience with secrets‑management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.\r\nExperience managing or securing non‑human identities and service‑to‑service access.\r\nStrong understanding of network segmentation and access boundaries in cloud environments.\r\nDemonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.\r\nNice to haveExperience securing real‑time or low‑latency control‑plane systems.\r\nFamiliarity with service mesh security and workload‑to‑workload mTLS using Istio or similar technologies.\r\nWhy join usWork on real, production‑deployed autonomy.\r\nBuild technology that directly improves safety, efficiency, and productivity.\r\nTackle complex challenges in demanding, real‑world environments.\r\nBe part of a fast‑moving team with high ownership and impact.\r\nSee your work deployed and making a difference in the field.\r\nCollaborate closely with experienced engineers and industry operators.\r\nWhat else you need to knowThis role is based in our San Francisco office. Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate. We do our best work together. That’s why all of our office‑based teams work onsite, five days a week.\r\nThe base salary range for this role is $167,000 - $230,000 per year. Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications. Base salary is just one part of your total rewards package. You may also be eligible for equity awards.\r\nBenefits Summary (USA Full‑Time Exempt Employees):\r\nMedical\r\nDental\r\nVision\r\nDisability\r\nLife Insurance\r\nFlexible Spending Account / Health Savings Account Options\r\n401(k)\r\nEquity\r\nSick Time\r\nUnlimited Flexible Time Off\r\nPaid Holidays\r\nPaid Parental Leave\r\nPre‑Tax Commuter Benefit Plan\r\nTeam lunch in our SoMa office every Tuesday and Thursday\r\nBenefits are subject to change at the company's discretion.\r\nPronto accepts applications on an ongoing basis.#J-18808-Ljbffr","datePosted":"2026-11-04T02:37:31.202Z","dateModified":"2026-11-04T02:37:31.202Z","hiringOrganization":{"@type":"Organization","name":"Cssmerge","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f77dc635d592c6ac769f13df"},"url":"https://jobsearcher.com/jobs/f77dc635d592c6ac769f13df"}}