Skip to content

Open nowPosted 22 hours ago

Senior Software Engineer - Cloud & Platform Security

Pronto32 open roles

Where
San Francisco, CA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Software Engineer - Cloud & Platform SecurityPronto · San Francisco, CA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Pronto's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market. Pronto postings stay open a median of 8 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.3%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 22 hours ago

Pronto median: 8 days open

The posting

Who we are

Pronto AI is a global leader in commercializing autonomous vehicle (AV) technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. While much of the industry remains in R&D, we deliver real, production-ready autonomy that is already operating in the field.

We are on a mission to make mining operations safer, smarter, and more efficient through cutting-edge technology, and we are building toward becoming the world’s first profitable AV technology company.

What you’ll do

As a Senior Software Engineer focused on Cloud & Platform Security, you’ll work directly with our Infrastructure team to secure the systems that manage and control our fleet. Rather than duplicating the team’s existing cloud and Kubernetes ownership, you’ll bring deep security expertise across identity, secrets, network segmentation, and the fleet-management and remote-vehicle-control APIs that represent some of the highest-impact systems in our environment.

  • Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
  • Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
  • Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
  • Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
  • Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
  • Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.

What we’re looking for

We’re looking for a hands-on security engineer who can work as an embedded partner to an experienced Infrastructure team. You should be comfortable going deep on cloud and platform security, influencing technical decisions, and helping engineers build secure systems without operating as a gatekeeper..

Basic qualifications

  • 5+ years of experience in cloud, infrastructure, or platform security.
  • Hands-on experience working with production Kubernetes environments.
  • Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
  • Experience designing or reviewing both coarse-grained and fine-grained authorization models.
  • Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
  • Experience managing or securing non-human identities and service-to-service access.
  • Strong understanding of network segmentation and access boundaries in cloud environments.
  • Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Nice to have

  • Experience securing real-time or low-latency control-plane systems.
  • Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.

Why join us

  • Work on real, production-deployed autonomy.
  • Build technology that directly improves safety, efficiency, and productivity.
  • Tackle complex challenges in demanding, real-world environments.
  • Be part of a fast-moving team with high ownership and impact.
  • See your work deployed and making a difference in the field.
  • Collaborate closely with experienced engineers and industry operators.

What else you need to know

This role is based in our San Francisco office. Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate. We do our best work together. That’s why all of our office-based teams work onsite, five days a week.

The base salary range for this role is $167,000 - $230,000 per year.

Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications.

Base salary is just one part of your total rewards package. You may also be eligible for equity awards.

Benefits Summary (USA Full-Time Exempt Employees):

  • Medical, Dental, Vision, Disability, and Life Insurance
  • Flexible Spending Account / Health Savings Account Options
  • 401(k)
  • Equity
  • Sick Time, Unlimited Flexible Time Off, and Paid Holidays
  • Paid Parental Leave
  • Pre-Tax Commuter Benefit Plan
  • Team lunch in our SoMa office every Tuesday and Thursday

Benefits are subject to change at the company's discretion. Pronto accepts applications on an ongoing basis.

Ready to join us as we serve those who serve others?

#LI-Onsite

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Pronto's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Pronto's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Pronto's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.