Principal Security Engineer, Cloud Security

Overview

Working at Atlassian

Atlassians can choose where they work - whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. Interviews and onboarding are conducted virtually, as part of being a distributed-first company.

About Team

The Product Security team at Atlassian is committed to ensuring the delivery of secure products. These teams are geographically distributed, with a presence in the USA, Australia, and India. Each team is structured uniformly to provide comprehensive product security services tailored to their respective time zones. These services include security consulting, risk identification, and mitigation consulting for all products within their purview.

Recognising the critical importance of product security as a customer necessity and a competitive edge, our team holds a pivotal position within the organisation. With Atlassian's strong engineering focus and emphasis on autonomous teams, maturing the security of this complex environment stands as our core duty. Our tasks encompass identifying potential security threats in our products, devising suitable mitigation strategies, and evaluating their effectiveness on a large scale. It is imperative to execute these responsibilities in a scalable manner, allowing us to adapt to the evolving landscape shaped by changes in our business, global dynamics, adversarial strategies, customer requirements, technological advancements, and other factors.

Overview

As a Principal Security Engineer, Cloud Security at Atlassian, you will be the technical architect and engineer driving the architecture and technical vision across our cloud platforms, infrastructure, and software supply chain. You will partner closely with engineering leadership, platform teams, and principal architects to define secure-by-default standards, architect scalable guardrails, and lead cross - organisational initiatives that protect Atlassian’s cloud environments at global scale.

In this role, you will operate at the intersection of deep technical leadership and strategic influence - diving hands-on into complex architectural designs, critical codebases, and high-severity escalations, while steering long-term security roadmaps and mentoring senior engineers across the organization. You will systematically identify systemic risks, design resilient mitigations, and ensure our cloud platforms deliver world-class security, reliability, and trust for over 300,000+ customers.

Responsibilities

As a Principal Product Security Engineer, Cloud Security , you will be the technical architect and engineer driving the architecture and and strategic SME driving cloud security architecture, automation, and secure-by-default platforms across Atlassian's global footprint. You will define the technical vision, establish architectural standards, and lead cross-organizational initiatives that equip engineering teams with state-of-the-art tools, patterns, and guardrails to build secure products by default. Partnering closely with security leadership, principal architects, and platform engineering teams, you will champion strategic programs that uplift and scale our security posture across multi-cloud environments. Some of your key responsibilities will include:

• Strategic Architecture & Secure Design: Define and steer the overarching security architecture for multi-cloud platforms (AWS, GCP, Azure), setting company-wide secure-by-default standards, architectural patterns, and guardrails for cloud-native services and core platforms.

• Complex Threat Modeling & High-Impact Assessments: Drive advanced threat modeling and deep-dive security assessments across critical, complex systems, distributed microservices, and high-assurance environments (such as Isolated, Private, and Regulated/FedRAMP offerings).

• Platform Automation & Guardrails at Scale: Architect, champion, and scale automated security controls, detection capabilities, and self-healing guardrails embedded directly into CI/CD pipelines and infrastructure as code (IaC), systematically eliminating classes of vulnerabilities.

• Continuous Posture Optimization & CSPM Strategy: Set the technical direction for Cloud Security Posture Management (CSPM) and posture analytics, driving continuous compliance, maturing security baselines, and providing leadership visibility into systemic risk.

• Operational & Architectural Excellence: Establish company-wide reusable security frameworks, engineering guidelines, and operational standards that improve resilience, reliability, and security performance across Atlassian products.

• Technical Leadership & Mentorship: Serve as a technical sponsor and mentor for security and software engineers across the organization, fostering an inclusive culture of engineering excellence, security advocacy, and cross-team capability uplift.

• Critical Incident Advisory & Architectural Remediation: Act as the principal cloud security authority during high-severity security incidents, partnering with Incident Response to conduct root-cause investigations, formulate long-term architectural mitigations, and prevent recurrence.

• Executive & Stakeholder Influence: Translate complex cloud security risks and technical roadmaps into strategic priorities for executive and non-technical stakeholders, driving consensus and cross-functional alignment on mission-critical security initiatives.

On Your First Day, We'll Expect You To Have

• 10+ years of experience in security engineering with deep specialization in cloud security, secure architecture, and platform security at enterprise or hyper-growth SaaS scale.

• Proven track record as a technical authority or principal engineer driving large-scale security architectures, risk mitigations, and threat modeling initiatives across complex SaaS and cloud-native systems.

• Deep, hands-on expertise in multi-cloud security (AWS, GCP, and/or Azure) and container orchestration ecosystems (Docker, Kubernetes, service mesh).

• Extensive experience designing, securing, and conducting comprehensive architectural reviews for highly regulated, high-assurance cloud environments (such as Isolated, Private, Government, and FedRAMP offerings).

• Demonstrated experience guiding broad architectural transformations, including overseeing security strategy for monolith-to-microservices migrations.

• Strong proficiency in at least one modern programming language (such as Python, Go, Java, or JavaScript) and proven experience authoring scalable security automation, tooling, and infrastructure as code (IaC).

• Deep experience embedding automated security controls, policy-as-code, and compliance gates into modern CI/CD pipelines.

• Exceptional technical communication and executive influence, with a demonstrated ability to align diverse engineering teams, architects, and senior leadership around strategic security goals.

• Proven track record of mentoring and coaching senior engineers and cultivating an inclusive, collaborative engineering culture.

Qualifications

Required:

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience).

• Deep architectural mastery of cloud security, zero trust architecture, tenant data isolation, cryptographic systems/encryption, and multi-tenant SaaS environments at enterprise scale.

• Proven track record designing and driving infrastructure as code (IaC) governance, centralised secrets management, and embedding automated security guardrails across the entire software development lifecycle (SDLC).

• Deep understanding of cloud detection engineering, distributed telemetry/logging, IAM graph analysis, least-privilege policy automation, and enterprise alert optimisation.

…