Cloud Security Engineer

Our mission is to detect cancer early, when it can be cured. We are working to change the trajectory of cancer mortality and bring stakeholders together to adopt innovative, safe, and effective technologies that can transform cancer care.

We are a healthcare company, pioneering new technologies to advance early cancer detection. We have built a multi-disciplinary organization of scientists, engineers, and physicians and we are using the power of next‑generation sequencing (NGS), population‑scale clinical studies, and state‑of‑the‑art computer science and data science to overcome one of medicine’s greatest challenges.

GRAIL is headquartered in the bay area of California, with locations in Washington, D.C., North Carolina, and the United Kingdom. It is supported by leading global investors and pharmaceutical, technology, and healthcare companies.

For more information, please visit

GRAIL is seeking a mission-driven and high‑impact Staff Cloud Security Engineer to help secure the cloud platforms that power one of healthcare's most innovative early cancer detection technologies. Reporting to the Director of Product Security, this role serves as a technical leader responsible for shaping cloud security strategy, enabling secure product delivery, and helping protect the systems that support GRAIL's life‑saving mission.

As a Staff‑level individual contributor, you will lead the technical execution of the Cloud Security roadmap, partnering closely with Engineering, Platform, Infrastructure, Dev Ops, and Product teams to drive secure cloud transformation initiatives. You will provide guidance to other engineers while influencing cloud architecture, Dev Sec Ops  practices, and secure development decisions across the product and infrastructure lifecycle.

This role will help teams navigate an evolving threat landscape by implementing scalable AWS security controls, automation, and cloud‑native security best practices while maintaining engineering agility and delivery velocity in a highly regulated environment.

This role is based in Menlo Park, California, and will move to Sunnyvale, California in Fall 2026. GRAIL offers a flexible work arrangement, with the ability to work from GRAIL's office or from home. Our current flexible work arrangement policy requires that a minimum of 60%, or 24 hours, of your total work week be on‑site. Your specific schedule, determined in collaboration with your manager, will align with team and business needs and could exceed the 60% requirement for the site.

• Lead the design, implementation, and continuous improvement of cloud security architectures across AWS environments, ensuring product security, and secure‑by‑design principles throughout the infrastructure and application lifecycle.

• Partner with Platform, and Cloud Engineering team to design, implement, and manage AWS‑native security services including IAM, KMS, Guard Duty, Security Hub, Inspector, Macie, WAF, Shield, Cloud Trail, Config, and Cloud Watch for proactive threat detection and risk management.

• Develop and enforce cloud security standards, guardrails, and governance frameworks across AWS accounts, containers, Kubernetes/EKS, serverless, and hybrid cloud workloads.

• Automate security monitoring, compliance validation, vulnerability management, and incident response workflows using Infrastructure as Code (IaC), scripting, and cloud‑native automation tools.

• Conduct cloud threat modeling, architecture risk assessments, and security reviews for AWS‑hosted applications, APIs, infrastructure, and enterprise‑integrated systems.

• Secure Dev Ops platforms and cloud‑native application environments by implementing least‑privilege access controls, secrets management, secure network segmentation, encryption, and workload protection.

• Manage and enhance continuous cloud security posture management (CSPM), container security, and runtime protection capabilities across AWS environments.

• Scope, coordinate, and review penetration testing, vulnerability assessments, and advanced security testing activities across cloud infrastructure, applications, and Dev Ops tooling.

• Serve as a cloud security subject matter expert during…