Cloud Security Engineer at Mesh

<div class="content-intro"><p><strong>About Mesh</strong></p> <p>At Mesh, our mission is to enable consumers to pay and be paid with any asset. Today, trillions of dollars in tokenized assets exist but remain largely unusable for everyday commerce. Mesh is bridging this gap by making crypto payments reliable, useful, and ubiquitous. We combine a powerful orchestration engine with a seamless consumer app to unlock liquidity for the world. Backed by leading investors like PayPal Ventures, Paradigm, and Galaxy Ventures, we are building the infrastructure for the next era of the global economy. Join us!</p></div><p><strong>Overview</strong></p> <p data-start="229" data-end="555">As a Cloud Security Engineer, you will be the primary architect and guardian of our digital infrastructure, blending deep technical engineering with proactive risk management. You will design and deploy secure, scalable environments by integrating security directly into the DevSecOps lifecycle, ensuring that every layer of the stack—from network perimeters and identity management to container runtimes—is resilient by design. By leveraging automation and observability tools, you will maintain a continuous defense-in-depth strategy, overseeing threat detection, incident response, and compliance frameworks. Ultimately, this role bridges the gap between development and operations, spearheading cloud governance and disaster recovery efforts to guarantee long-term operational stability and a hardened security posture.</p> <p><strong>What You'll Do</strong></p> <ul> <li>Lead Platform & Infrastructure Development by architecting scalable, resilient systems using Infrastructure as Code (IaC).</li> <li>Design and implement Secure Infrastructure across cloud environments, ensuring a "security-by-default" architecture.</li> <li>Manage Cloud Resources and DNS Operations, including zone management, records, and global resolution strategies.</li> <li>Optimize performance and defense by deploying and managing WAF, CDN, and Network Firewalls (IDS/IPS).</li> <li>Drive CI/CD Automation by integrating security gates, SAST/DAST scanning, and automated Secret Rotation into development pipelines.</li> <li>Enforce robust Identity and Access Management (IAM) protocols and oversee VPN & Certificate Management.</li> <li>Advance Security Operations by implementing and managing SIEM, SOAR, and XDR platforms for rapid threat detection and response.</li> <li>Maintain Cloud Security Posture Management (CSPM) and Infrastructure Observability to proactively identify and remediate misconfigurations.</li> <li>Secure containerized workloads by establishing strict Docker & Runtime Security standards.</li> <li>Own Complianc