Security Engineer II, Product & Platform Security

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

Help protect Nscale’s cloud platforms, hyperscale GPU clusters, and production environments. As a Security Engineer II in our Product & Platform Security team, part of the CISO organisation, you’ll investigate real findings and incidents, separate meaningful risk from noise, and work with engineering to resolve the causes.

This is a hands‑on cloud‑security, detection, and response role. You’ll review cloud posture, triage production threats, improve the telemetry needed to investigate them, and turn incident findings into lasting improvements in controls and coverage.

• Review findings from cloud security posture management (CSPM) and cloud‑security tooling across our cloud platforms and GPU infrastructure.
• Validate findings against live environments, assess technical and business impact, and assign severity so teams address the right risks first.
• Partner with platform, infrastructure, and engineering teams to drive remediation and track findings to closure.
• Identify recurring misconfigurations and exposure patterns, address their systemic causes, and establish guardrails that make systems secure by design.

• Triage security alerts and threats in production, determining what’s real, how urgent it is, and its potential blast radius.
• Own classification, enrichment, and escalation into incident response when warranted, involving system owners to understand the architecture and impact.
• Keep clear records of what you observed, what you decided, and why.
• Feed lessons back into detections and runbooks so future alerts are easier to assess and act on.

• Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services.
• Identify missing sources, fields, or retention, and work with platform and engineering teams to close coverage gaps.
• Help ensure security-relevant telemetry reaches logging and SIEM pipelines reliably and supports detection and investigation.
• Contribute to detections and alerting, prioritising signal quality over volume.

• Reconstruct incidents, establish scope and impact, and determine whether findings are exploited, exploitable, or false alarms.
• Perform host, container, and cloud forensics, using timelines, artefacts, and evidence to support incident response and root‑cause analysis.
• Contribute to blameless post‑incident reviews and translate lessons into stronger controls, better coverage, and improved processes.
• Maintain detailed investigation and resolution records for audit and compliance purposes.

• Time to validate, prioritise, and resolve cloud posture findings and production alerts
• Reduction in recurring misconfiguration and exposure types
• Log and telemetry coverage across critical cloud, platform, and production systems
• Quality and timeliness of investigations and post‑incident improvements

• 2–5…