Cloud Security Engineer

Scribd, Inc. is on a mission to advance human understanding. Our four products — Scribd®, Slideshare®, Everand™, and Fable — help billions of people across the globe move beyond access and into insight, application, and expertise.

We support a culture where our employees can be real and be bold; where we debate and commit as we embrace plot twists; and where every employee is empowered to take action as we prioritize the customer.

We believe the best work happens when individual flexibility is balanced with meaningful community connection. Scribd Flex empowers employees to choose the workstyle and location that support their best performance, while committing to intentional in-person moments that strengthen collaboration and culture. Occasional in-person attendance is required for all Scribd, Inc. employees, regardless of location.

So what are we looking for in new team members? At Scribd, Inc., we hire for “GRIT.” Traditionally defined as the intersection of passion and perseverance toward long‑term goals, GRIT reflects the mindset we expect from every employee. For us, it also serves as a practical framework for how we work: setting and achieving Goals, delivering Results within your role, contributing Innovative ideas and solutions, and strengthening the broader Team through collaboration and attitude.

This posting reflects an approved, open position within the organization.

Our Security Engineering team protects Scribd's applications and cloud infrastructure. We take a proactive, shift-left approach, integrating security throughout the software development lifecycle, from development through production. We work closely with software engineers, infrastructure and platform teams, and product teams to identify and address security risks, build effective security controls, and enable engineering teams to move securely.

As a Staff Cloud Security Engineer
, you'll help shape the technical direction of Cloud Security and drive complex architectural investments across our AWS and GCP environments. You'll work closely with engineers already building our cloud security capabilities to strengthen our identity model, establish secure-by-default guardrails, and protect the workloads our applications run on.

This is a hands‑on technical leadership role. You'll lead significant initiatives, build security capabilities, and influence engineering teams to adopt them, balancing long‑term architectural improvements with the most pressing security risks.

• Strengthen and evolve security architecture and guardrails across our AWS and GCP environments, including account and project configuration, network security, and infrastructure standards.
• Strengthen identity and access management across our cloud environments, driving least privilege, just‑in‑time access, short‑lived workload credentials, and secure cross‑account access.
• Define and improve secrets management, data protection, and encryption standards, ensuring security controls are effective and their coverage can be demonstrated.

• Drive security architecture and guardrails for cloud workloads, including Kubernetes, secure base images, workload identity, runtime protection, and isolation of services processing untrusted content, with an emphasis on limiting the impact of compromise.
• Partner with our Infrastructure teams to secure cloud deployment paths, workload identities, registries, and the infrastructure supporting CI/CD.
• Build reusable security capabilities and paved paths, including Terraform modules and policy‑as‑code guardrails, that make secure configurations the default and prevent noncompliant infrastructure…