Staff Cloud Security Engineer

OUR MISSION   SPAN IS ENABLING ELECTRIFICATION FOR ALL ⚡ SPAN is mission-driven to design, build, and deploy products that electrify our built environment, decarbonize our world, and slow the effects of climate change. - Decarbonization is the process to reduce or remove greenhouse gas emissions, especially carbon dioxide, from entering our atmosphere. - Electrification is the process of replacing fossil fuel appliances that run on gas or oil with all-electric upgrades for a cleaner way to power our lives. At SPAN, we believe in: - Enabling homes and vehicles powered by clean energy - Making electrification upgrades possible - Building more resilient homes with reliable backup - Designing a flexible and distributed electrical grid The Role SPAN is seeking a hands-on, autonomous Sr. Software Security Engineer. In this role, you will drive the technical execution of SPAN’s software security initiatives. You will architect, develop, and deploy the foundational security tools, frameworks, and infrastructure required to protect SPAN's platform and backend ecosystem. Key Responsibilities: - Foundational Tooling & DevSecOps: Design and build automated security tools, paving the way for self-service security guardrails that empower developers without sacrificing velocity. - Vulnerability Remediation: Drive the triage and resolution of security vulnerabilities across our backend stack—directly writing code to patch CVEs yourself when needed, while partnering with engineering teams to architect broader, deeper structural fixes. - Cloud Security Hardening: Serve as the technical lead for hardening our AWS production environments, ensuring top-tier alignment with modern industry standards and compliance. - Threat Modeling & Risk Mitigation: Conduct deep-dive threat modeling and security architecture reviews for high-impact, complex systems and net-new platform features. About you - Experience: 6+ years of dedicated experience in security engineering, application security, or DevSecOps - Identity & Access Management: Understanding of authentication and authorization protocols (OIDC, SAML and OAuth). - Cloud Infrastructure: Expertise in securing, auditing, and hardening cloud ecosystems, with a strong emphasis on AWS environments. - Vulnerability Resolution: Experience balancing tactical, fast-paced vulnerability patching with strategic, framework-level remediation alongside development teams. - Software Engineering Roots: Proficient in writing production-grade code in at least one of our core backend languages: Python, Java or Node. LIFE AT SPAN Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges.  SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.  We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN. The Perks: ⚡ Competitive compensation + equity grants at a well-funded, venture-backed company ⚡ Comprehensive benefits: 100% employee premiums for base plans on medical, dental, vision with options for additional coverage.  Parental leave up to six (6) months depending on eligibility ⚡ Comfortable, sunny office space located near BART and Caltrain public transit ⚡ Strong focus on team building and company culture: Employee Resource Groups, monthly social events, SPANcakes recognition breakfast, lunch and learns ⚡ Flexible hours, one holiday per month and unlimited PTO   Interested in joining our team? Submit an application today and we’ll be in touch with next steps!