Staff Security Engineer

SHEIN's cloud security engineer on its global security team, based in Los Angeles, owning the posture and runtime protection of containers and Kubernetes across a multi-cloud estate on AWS, Azure and GCP. The role is greenfield and suits an engineer who designs, automates and troubleshoots rather than only configures.

The work includes setting standards for CSPM, image security, admission control and runtime integrity; running Kyverno and OPA policy-as-code; hardening clusters through RBAC, network policies, pod security and secrets management; deploying containerised NDR and runtime detection sensors; feeding telemetry to the SOC; and writing Kubernetes incident runbooks. SHEIN wants five or more years of security engineering, three of them hands-on in cloud or container security, production use of tools such as Falco or Prisma Cloud Compute, and the ability to work with teams whose main language is Mandarin.