About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

Help protect Nscale's cloud platforms, hyperscale GPU clusters, and production environments. As a Security Engineer II in our Cloud & Platform Security team, part of the CISO organization, you'll investigate real findings and incidents, separate meaningful risk from noise, and work with engineering to resolve the causes.

This is a hands-on cloud-security, detection, and response role. You'll review cloud posture, triage production threats, improve the telemetry needed to investigate them, and turn incident findings into lasting improvements in controls and coverage.

What you'll be doing

Cloud posture and findings review

Review findings from cloud security posture management (CSPM) and cloud-security tooling across our cloud platforms and GPU infrastructure.
Validate findings against live environments, assess technical and business impact, and assign severity so teams address the right risks first.
Partner with platform, infrastructure, and engineering teams to drive remediation and track findings to closure.
Identify recurring misconfigurations and exposure patterns, address their systemic causes, and establish guardrails that make systems secure by design.

Production threat triage

Triage security alerts and threats in production, determining what's real, how urgent it is, and its potential blast radius.
Own classification, enrichment, and escalation into incident response when warranted, involving system owners to understand the architecture and impact.
Keep clear records of what you observed, what you decided, and why.
Feed lessons back into detections and runbooks so future alerts are easier to assess and act on.

Log and telemetry coverage

Assess log and telemetry coverage across cloud, Kubernetes, hosts, and production services.
Identify missing sources, fields, or retention, and work with platform and engineering teams to close coverage gaps.
Help ensure security-relevant telemetry reaches logging and SIEM pipelines reliably and supports detection and investigation.
Contribute to detections and alerting, prioritising signal quality over volume.

Forensics and investigation

Reconstruct incidents, establish scope and impact, and determine whether findings are exploited, exploitable, or false alarms.
Perform host, container, and cloud forensics, using timelines, artefacts, and evidence to support incident response and root-cause analysis.
Contribute to blameless post-incident reviews and translate lessons into stronger controls, better coverage, and improved processes.
Maintain detailed investigation and resolution records for audit and compliance purposes.

KPIs

Time to validate, prioritise, and resolve cloud posture findings and production alerts
Reduction in recurring misconfiguration and exposure types
Log and telemetry coverage across critical cloud, platform, and production systems
Quality and timeliness of investigations and post-incident improvements

About You

2–5 years of security experience, with hands-on work in security operations, cloud security, detection and response, or incident response and forensics.
Practical experience triaging findings and alerts, with the judgement to distinguish real risk from noise.
Working knowledge of cloud security and posture management in AWS, GCP, or Azure, including common infrastructure misconfigurations and exposures.