Staff Security Engineer, Cloud

Why Rogo

At Rogo, we are building Wall Street's first true AI analyst. Our mission is to empower finance professionals at the world’s top investment banks, private equity funds, and investment firms with AI that delivers unparalleled speed, accuracy, and insight. We are not just improving financial workflows; we are redefining them from the ground up.

This is a unique opportunity to join a generational company at a key inflection point. With a rapidly growing client base, proven product-market fit, and backing from world-class investors, we are scaling quickly and defining a new category of enterprise AI.

Our team is sharp, motivated, and deeply committed to the mission. We operate with intensity, take ownership of complex problems, and stay relentlessly focused on our users. If you thrive in a fast-paced environment, demand excellence, and want to help build the future of finance, we invite you to join us.

The Role

Rogo is hiring a Staff Security Engineer to lead the design and implementation of cloud security architecture across AWS and GCP. This is a deeply hands-on role for an engineer who has built and operated secure cloud platforms at scale and prefers solving security problems through code, systems design, and automation rather than policy alone.

You will own the technical direction of cloud security at Rogo: designing secure primitives, authoring Terraform at scale, shaping identity and network architecture, and embedding security into the core platform. You will operate as a senior technical leader while remaining highly tactical, writing production code, reviewing infrastructure changes, and unblocking teams with pragmatic security solutions.

What You Will Own

• Architect and implement cloud security foundations across AWS and GCP, including account/project structure, IAM models, network segmentation, and secure service-to-service communication.

• Own and author Terraform-based security architecture, including:

• Reusable, opinionated Terraform modules for IAM, networking, logging, and encryption

• Policy enforcement and guardrails that prevent insecure infrastructure from being deployed

• Secure defaults embedded directly into infrastructure primitives

• Design and operate cloud identity systems at scale, including workload identity, service accounts, role assumption, and cross-cloud access patterns.

• Lead the security design of cloud networking, including VPC architecture, private connectivity, egress control, firewalling, and isolation boundaries.

• Build and maintain security automation across CI/CD and cloud environments, eliminating manual processes and reducing operational risk.

• Own Kubernetes and container security for production workloads (GKE/EKS), including cluster hardening, RBAC, workload identity, image security, and runtime controls.

• Define and implement logging, monitoring, and detection pipelines that provide high-signal visibility into cloud security posture and incidents.

• Perform threat modeling and architectural reviews for new infrastructure and platform changes, driving security decisions with technical authority.

• Act as a technical multiplier: reviewing critical infrastructure changes, mentoring engineers, and raising the overall security bar across the organization.

Great Candidates Often

• Have built cloud security platforms or foundational infrastructure in AWS and GCP, not just consumed managed services.
• Are deeply fluent in Terraform, including large-scale state management, module design, and safe rollout strategies.
• Think in terms of secure systems and primitives, not one-off controls or point solutions.
• Have strong opinions on cloud IAM and networking design, informed by real-world failures and incident response.
• Are comfortable operating in ambiguous environments and defining long-term technical direction.
• Prefer automation, code, and guardrails over documentation and manual review.
• Can influence architecture through technical depth rather than organizational authority.

Bonus

• Experience designing multi-account AWS organizations or large GCP project hierarchies.
• Familiarity with policy-as-code systems (OPA, custom policy engines, etc.).
• Experience with cloud-native detection and posture tools, including tuning signal-to-noise.
• Background in high-growth startups or infrastructure-heavy platforms.

Who You Are

• You thrive in fast-paced environments. You are high-intensity and care a lot about what you do, and you're ecstatic to work at a startup.
• You are ambitious. You have fun solving problems that others think are impossible.
• You are curious. You find joy in learning about AI, technology, and finance.
• You are an owner. You are autonomous, self-directed, and comfortable working with ambiguity.
• You are collaborative, organized, thoughtful, and kind.

Why Join Rogo?

• Exceptional traction: strong PMF with the world's largest investment banks, hedge funds, and private equity firms.
• World-class team: we take talent density seriously. We like working with incredibly smart, driven people.
• Velocity: we work fast, which means you learn a lot and constantly take on more.
• Frontier technology: we're developing cutting-edge AI systems, pushing the boundaries of reinforcement learning and published research, redefining what's possible, and inventing the future.
• Cutting Edge Product: Our platform is state-of-the-art and crazily powerful. We're creating tools that make people smarter, reinventing finance works.