Cloud Security Engineer

Description Tango is a successful, market leader, a live-streaming Platform with 450+ Million registered users, in an industry projected to reach $240 BILLION in the next couple of years. The B2C platform, based on the best-quality global video technology, allows millions of talented people around the world to create their own live content, engage with their fans, and monetize their talents. Tango live stream was founded in 2018 and is powered by 500+ global employees operating in a culture of growth, learning, and success! The Tango team is a vigorous cocktail of hard workers, creative brains, energizers, geeks, overachievers, athletes, and more. We push the limits to bring our app from “one of the top” to “the leader”. The best way to describe Tango's work style is not to use the word “impossible”. We believe that success is a thorny path that runs on sleepless nights, corporate parties, tough releases, and of course our users' smiles (and as we are a LIVE app, we truly get to see our users all around the world smiling right in front of us in real-time!). Do you want to join the party? Responsibilities Tango is a global live-streaming platform serving a large international audience across a multi-cloud infrastructure. We are building out our security function, and cloud security is the centre of that investment. We are looking for a Cloud Security Lead to own cloud security end to end — the strategy, the architecture, the tooling, and the engineering work to make it real. This is a domain-ownership role, not a ticket-queue role. You will set the direction for how we secure our cloud environments, and you will be hands-on in delivering it. Cloud security architecture: Own the security architecture of our cloud environments across providers, driving toward a consistent, well-understood baselineDefine hardened configuration baselines using CIS Cloud Benchmarks and equivalent standardsLead security design reviews and threat modelling for new infrastructure and platform workBuild the reference patterns that let engineering teams ship securely by default Cloud infrastructure and workload security: Own our CNAPP/CSPM capability (Wiz) — coverage, tuning, prioritisation, and turning findings into closed workDrive workload protection across virtual machines, containers, and Kubernetes, including runtime securityOwn vulnerability and patch strategy for cloud workloads, with clear SLAs and measurable closureBuild cloud asset visibility and external attack surface management so we always know what we run and what is exposed Requirements 5+ years in security engineering, with at least 3 years focused on cloud security in production environmentsDeep, practical expertise in at least one major cloud provider — Google Cloud is our primary environment Strong Kubernetes and container security experience: workload identity, admission control, network policy, image supply chain, runtime protectionHands-on Infrastructure-as-Code experience (Terraform or equivalent) and the ability to enforce policy through code rather than documentsReal depth in cloud identity and access management: entitlement design, privilege escalation paths, cross-account and cross-project trust, federation with an IdP such as OktaWorking proficiency in Python, Go, or a comparable language — you automate rather than accumulate manual processDemonstrated ability to build a capability from a low baseline: you have taken a cloud environment from unmanaged to well-governed and can walk through exactly howExperience running or materially contributing to cloud security incidentsThe credibility and communication skill to influence senior engineers without formal authority, and to present clearly to executivesFluent English Nice to have: Experience as the first or only dedicated cloud security engineer in an organisationConsumer-scale platform experience — high traffic, rapid release cadence, real cost pressureDetection engineering in cloud environments; familiarity with eBPF-based toolingExperience operating across heterogeneous cloud providers and consolidating them onto a common standardExperience mentoring or leading engineers, formally or informallyRelevant certifications (Google Professional Cloud Security Engineer,CKS,CKA) Familiarity with SOC 2, ISO 27001, or PCI DSS control expectations What we offer: Stock options grant (we’re a Silicon Valley Company)Competitive salaryMedical insurance for you and 75% off for your relativesOn-site position with 4 days at the office and 1 day WFHBudget for lunchParkingMultisport cardCheerful team spirit and fun office atmosphere If this sounds like you, apply and help empower live entertainers and creators to build independent businesses around their live talents.