Principal Security Engineer, Cloud Security

About the role

Atlassian's Product Security team is looking for a Principal Security Engineer, Cloud Security, to act as the technical architect and engineer behind cloud security across its platforms, infrastructure and software supply chain. The role defines secure-by-default standards, builds scalable guardrails and leads cross-organisational initiatives protecting Atlassian's cloud environments at global scale. It is listed as remote, with interviews and onboarding conducted virtually.

Key responsibilities

• Define and steer the security architecture for multi-cloud platforms (AWS, GCP, Azure) and set company-wide secure-by-default standards, patterns and guardrails.
• Drive advanced threat modeling and deep-dive security assessments of critical systems, microservices and high-assurance environments such as Isolated, Private and FedRAMP offerings.
• Architect and scale automated security controls, detection and self-healing guardrails embedded in CI/CD pipelines and infrastructure as code.
• Set the technical direction for Cloud Security Posture Management and posture analytics, improving compliance and security baselines.
• Establish reusable security frameworks, engineering guidelines and operational standards.
• Mentor security and software engineers and act as the principal cloud security authority during high-severity incidents, working with Incident Response on root-cause investigations and long-term mitigations.
• Translate complex cloud security risks and roadmaps into strategic priorities for executives and non-technical stakeholders.

Required profile

• 10+ years of security engineering experience, with a proven track record as a technical authority or principal engineer on large-scale security architectures.
• Bachelor's or Master's degree in Computer Science, Information Security or a related field, or equivalent practical experience.
• Experience guiding architectural transformations, including security strategy for monolith-to-microservices migrations.
• Ability to mentor senior engineers and communicate clearly with executive leadership and engineering teams.

Required skills

• Hands-on multi-cloud security (AWS, GCP and/or Azure) and container orchestration (Docker, Kubernetes, service mesh).
• Experience securing highly regulated environments (Isolated, Private, Government, FedRAMP) and writing IaC.
• Proficiency in at least one modern language (Python, Go, Java or JavaScript) and embedding policy-as-code and compliance gates in CI/CD pipelines.
• Cloud detection engineering, distributed telemetry/logging, IAM graph analysis, least-privilege policy automation and alert optimisation.

Atlassian offers a range of perks and benefits, including health and wellbeing resources and paid volunteer days; the role may also be eligible for benefits, bonuses, commissions and equity.