Staff Cloud Security Engineer (Breakthrough)

POSITION SUMMARY

About Breakthrough

At Breakthrough, we empower our clients with data, technology, and market knowledge to reduce costs, create efficient networks, and decarbonize transportation. As a strategic partner to our clients, we challenge legacy practices in the $700 billion transportation industry, delivering sustainable fuel and freight products that foster fair partnerships and environmental responsibility.

As a digital product company, our culture thrives on curiosity, autonomy, and purpose-driven innovation. Here, you're not just executing tasks; you're collaborating with a team dedicated to transforming transportation and making a tangible impact on the global economy and the planet.

The Role

As a Staff Cloud Security Engineer, you'll play a pivotal role in developing and enhancing digital products that enable shippers to optimize the way freight moves around the globe.

The Staff Cloud Security Engineer is a key position to strengthen the security of our GCP-native SaaS platform, FELIX. This is a senior, hands-on role responsible for building and automating the security capabilities that protect our infrastructure, APIs, and client data. You will lead the technical security function within Breakthrough’s product organization, while collaborating with our CTO and Corporate InfoSec team to shape and align strategy. This role will drive cloud security, threat detection, infrastructure-as-code (IaC) policy enforcement, and DevSecOps enablement with a focus on automation, scalability, and practical risk reduction. It’s ideal for someone who enjoys solving problems with code, thrives in a high-ownership environment, and values balancing product development agility with sound security fundamentals.

We're seeking individuals who excel in collaborative environments, are driven by the "why" behind their work and the core problems they're trying to solve, and are eager to develop innovative solutions while influencing the evolution of our systems, teams, and culture.

“At Breakthrough, we’re figuring out things for the first time; things that no
one else has ever done before” - Engineering leader, Breakthrough

JOB RESPONSIBILITIES

What You'll Do

Technical Leadership 

• Provide technical guidance and security expertise across engineering teams. 

• Lead the implementation of security best practices and advocate for secure design, development, and deployment processes. 

• Collaborate with Engineering Directors, Principal Engineers, and Corporate InfoSec to align security strategy with product and platform goals. 

• Serve as the primary security point of contact within the Engineering organization. 

Development & Automation 

• Design and implement security tooling and automation to support DevSecOps practices. 

• Write scripts and lightweight tools (e.g., in Python, Bash) to automate detection, remediation, and compliance workflows. 

• Contribute to infrastructure and CI/CD security by embedding secure guardrails in Terraform, Bitbucket pipelines, and deployment pipelines. 

Architectural Design 

• Lead threat modeling and secure architecture reviews across our GCP-native SaaS platform. 

• Partner with Cloud Engineering to integrate security into infrastructure provisioning and platform components. 

• Translate compliance and security frameworks (e.g., SOC 2, NIST 800-53, FedRAMP, CIS Controls) into actionable, scalable policies and controls in infrastructure and code. 

• Evaluate and recommend security technologies with input from CTO and Corporate InfoSec — including GCP-native tools, CrowdStrike, and modern SIEM/SOAR platforms. 

Technical Excellence 

• Drive the evaluation and adoption of cloud-native and modern security tools (e.g., Google SCC, Chronicle, Panther, CrowdStrik