About Quizlet

At Quizlet, our mission is to help every learner achieve their outcomes in the most effective and delightful way. We’re a $1B+ learning platform used by two-thirds of U.S. high school students and half of college students, powering over 1 billion learning interactions each week.

We blend cognitive science with machine learning to personalize and enhance the learning experience for students, professionals, and lifelong learners alike. We’re energized by the potential to power more learners through multiple approaches and various tools.

Let’s Build the Future of Learning

Join us to design and deliver AI-powered learning tools that scale across the world and unlock human potential.

Why Join Quizlet?

🌎 Massive reach: 60M+ users, 1B+ interactions per week

🧠 Cutting-edge tech: Generative AI, adaptive learning, cognitive science

📈 Strong momentum: Top-tier investors, sustainable business, real traction

🎯 Mission-first: Work that makes a difference in people’s lives

🤝 Inclusive culture: Committed to equity, diversity, and belonging

About the Team

Security Engineering protects Quizlet's learners, employees, and systems. We build practical safeguards that help teams deliver products securely and confidently. We partner with engineering, infrastructure, trust & safety, and other teams to reduce risk while supporting a reliable experience for learners.

About the Role

As a Staff Cloud Security Engineer, you will set technical direction and deliver security improvements across our cloud infrastructure and public-facing services. Your primary focus will be Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), workload identity, infrastructure as code, and remediation. You will also improve edge defenses and turn data-protection requirements into technical controls, automated checks, and evidence that those controls work.

In this role, you will

Lead cloud and Kubernetes security improvements, including workload identity, organization policies, and network protections. Partner with Infrastructure and identity colleagues on design, implementation, and tested rollouts.

Operate cloud security tooling, prioritize findings by risk, and work with engineers to remediate vulnerabilities and harden container images.

Improve WAF rules, rate limits, bot defenses, and anomaly detection to catch malicious traffic while reducing disruption for legitimate users.

Build maintainable security automation and review infrastructure as code so secure configurations are easier to adopt and sustain.

Create self-service patterns for securely exposing new services and connecting AI tools and Model Context Protocol (MCP) integrations to approved data.

Partner with engineering to implement agreed data-protection requirements through enforceable controls, CI checks, regression tests, and reliable evidence.

Guide cross-team security decisions, mentor engineers, and support incident response and security on-call responsibilities.

What you bring to the table

As a rough guide, we’re looking for 8+ years working with public-cloud infrastructure, including 5+ years in cloud security engineering. These are guidelines rather than hard cutoffs; equivalent experience demonstrating the depth and Staff-level impact described here is welcome.

Experience securing GCP and GKE environments.

Deep hands-on experience securing production cloud infrastructure and Kubernetes workloads, including identity and access, networking, Linux, and containers.

Experience using infrastructure as code, such as Terraform, and programming languages such as Python or Go to build security controls and automation.

Ability to translate security requirements into practical controls, automated tests, and evidence of effectiveness.

A record of leading complex technical work across teams, making and explaining sound risk tradeoffs, and communicating clearly and respectfully.

Bonus points if you have

Experience designing and tuning WAF rules, rate limits, or bot defenses, with attention to detection quality and customer impact.