Senior Security Engineer - Cloud Security

PagerDuty, Inc. (NYSE: PD) is the global leader in AI-first digital operations. By automatically detecting, diagnosing, and remediating issues, the PagerDuty Platform orchestrates AI agents and automated workflows with context from over 750 integrations. Trusted by approximately two-thirds of the Fortune 100 and nearly half of the Fortune 500, PagerDuty is the industry standard for organizations scaling resilient, autonomous operations. Notable customers include Chipotle, Cloudflare, Docusign, Fox, Nvidia, Salesforce, Spotify, Zoom and more. We are growing rapidly and hiring top talent with leading AI skills across engineering, sales, product, marketing, and beyond as we build the leading digital operations platform.

Senior Security Engineer — Cloud Security (Platform Engineering, Kubernetes & Identity)

PagerDuty is seeking a Senior Security Engineer to join our Cloud Security team, part of Security Engineering within the CTO organization. This is a preventive, platform-focused role for a strong engineer: you'll build and operate security-focused systems at scale to protect PagerDuty's multi-account AWS environment and the Kubernetes platforms running on it, with deep responsibility across container security and identity & access management (and, ideally, cryptography and key management). You'll harden the platform, design least-privilege identity and workload identity, and — because we're a lean team without a dedicated SOC — you'll shape detection strategy for the domains you own (Kubernetes and identity) and hunt during incidents. We lean hard into AI to move faster, so you'll both use and build agentic solutions to streamline how the team hardens, threat models, assesses risk, and operates. You'll partner with 30+ engineering teams to unblock them securely, and since we own and operate what we build, your controls ship as code, get validated against real usage, and roll out without disrupting engineering — including across our FedRAMP footprint.

This role will be require to work 2 days week from our Toronto, Ontario office

What you'll do

• Harden PagerDuty's AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP Moderate (Class C) baselines across a multi-account, multi-org footprint — proving results through evidence, config-remediation tooling, and KPIs that track posture, identity, and encryption/PKI health so we know where we stand and where the gaps are.
• Own Kubernetes and container security end to end — harden EKS clusters and the Istio service mesh against the CIS Kubernetes Benchmark, DISA Kubernetes STIG, and NSA/CISA Kubernetes hardening guidance, design and enforce Kubernetes RBAC and least-privilege workload identity (IRSA/pod identity), and drive controls for the container supply chain (image provenance, admission c