Lead Cloud Security Engineer at Tricentis · Trevo

Job description

About the role

Tricentis is hiring a Lead Cloud Security Engineer to help transform our cloud security function with AI. This is a hands-on role within Product Security, responsible for defining the cloud security roadmap across AWS, Azure, and GCP, leading architecture decisions, and mentoring a team of engineers. You'll replace manual security workflows with intelligent, AI-powered systems and champion that shift across the engineering organization. The ideal candidate brings 5+ years of cloud security experience, has already applied AI to real security problems, and has a track record of driving organizational change. Why Tricentis This isn’t a role where you’ll spend six months getting permission to try something new. We’re actively investing in AI across the security function and looking for the person to lead that charge. If you’ve been the one pushing for AI transformation at your current company and want a place that matches your urgency, let’s talk. What You’ll Actually Do Own the strategy. You’ll define and drive the cloud security roadmap, aligning security initiatives with business objectives and product milestones. When there’s a build-vs-buy decision on an AI security platform, you’ll make the call. When leadership asks where we should invest next, you’ll have the answer, backed by data. Lead from the front. You’ll run cross-functional security reviews and architecture discussions with engineering, DevSecOps, and SRE leadership. You’re the escalation point for complex cloud security incidents and the person the organization turns to for hard architectural decisions. You’ll champion security-first thinking through presentations, brown bags, and documentation that actually gets read. Architect and build. This is a hands-on leadership role. You’ll design, implement, and continuously improve security controls across all three clouds. That means architecting solutions for WAF, DDoS protection, identity management, and container security for Kubernetes workloads at scale, while pushing every one of those capabilities toward AI-driven detection, response, and self-healing. Automate relentlessly. You’ll leverage AI-powered automation to audit and maintain cloud-native security posture, develop and enforce policies-as-code, and build intelligent CI/CD security gates that contextualize findings instead of flooding developers with noise. The goal is security that scales with the platform, not with headcount. Grow the team. You’ll mentor cloud security engineers, provide hands-on technical guidance, and foster a culture of continuous learning where AI proficiency is a core skill, not an elective. You’ll help every engineer on the team ask “can AI do this better?” before reaching for a manual approach.

Requirements

5+ years in cloud security with deep, hands-on experience in at least one major cloud platform (AWS, Azure, or GCP)
Ability to leverage AI tools in security operations: building AI-driven cloud configuration auditing, using LLMs to review Terraform or CloudFormation templates, automating threat detection, or creating intelligent tooling that replaced manual workflows
Strong foundation in Terraform, Python, Kubernetes security, and IAM
Working knowledge of prompt engineering, RAG architectures, and agent frameworks
Track record of leading change: mentoring engineers, running architecture reviews, and serving as the go-to person for the hardest security problems
Experience pushing an organization to adopt AI, navigating skepticism, and delivering measurable results
A builder who ships, not a strategist who only decks
Tricentis Core Values:
Knowing what we need to achieve and how to achieve it is important. Tricentis core values define our ways of working and the behaviours we model that create an enjoyable and successful Tricentis life.
Demonstrate Self-Awareness: Own your strengths and limitations.
Finish What We Start: Do what we say we are going to do.
Move Fast: Create momentum and efficiency.
Run Towards Change: Challenge the status quo.
Serve Our Customers & Communities: Create a positive experience with each interaction.
Solve Problems Together: We win or lose as one team.
Think Big & Believe: Set extraordinary goals and believe you can achieve them.
You can look forward to:
Flexible working schedule (no core hours)
Learning and career growth opportunities
25 days of paid time off
3 Sick Days
2 days of paid Volunteering Leave per year to get involved in your local community or in a cause that matters to you
Hybrid work environment with home-office allowance
Meal allowance
Pension Contribution
Life & Disability Insurance
Paid Sickness Leave
A team of passionate professionals who are experts in their fields
Events for employees to learn, celebrate, and socialize (training sessions, hackathons, parties, sports events, board game gatherings, BBQs), and much more
About Tricentis:
Tricentis is a software company officially founded in 2007, with primary focus on software quality assurance. Whether exploratory or automated, functional or performance, API or UI, as well as mainframes or custom applications or packaged applications, or cloud-native applications - our comprehensive suite of specialized Continuous Testing tools makes DevOps real by giving our clients the confidence to release on demand.
Tricentis has more than 1500 employees working in across over 20 global offices in US, EMEA, APAC serving over 2100 customers, and currently expanding our R&D centers to two new locations in the Czech Republic – Prague and Brno - Hybrid office environment.
Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.
Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.
Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.
Global Sanctions Compliance
We comply with all applicable global sanctions and export control laws. Candidates must not be listed on any government restricted party lists (including OFAC SDN List and U.S. Commerce Department restricted lists) and must certify that their employment would not violate any sanctions or export control regulations. Candidates must notify us of any changes to their status during the application process or subsequent employment.

Requirements

Nice to have

Tech stack