Infrastructure & Product Security Engineer

Company Description Takumi Security is a specialized security consultancy whose team has worked with organizations ranging from early-stage startups to well-known global technology brands. The company has experience across diverse industries, including online dating, entertainment, social networking, major tech platforms, and financial institutions. Takumi Security provides services such as fractional CISO and strategic advisory, security program bootstrapping, and assistance with PCI, SOX, and SOC 2 compliance. The team also delivers security engineering, bug bounty program management, and security staff augmentation to help clients scale their security capabilities effectively. This remote role is with one of our amazing clients whose HQ is in the heart of San Francisco. Role Description Our client is looking for a Security Engineer who combines strong infrastructure and application security skills. Youll help secure a cloud platform built on substantial Kubernetes infrastructure, working across the systems that power the platform and the applications, APIs, and services that expose it to customers. This is a hands-on engineering role. Youll build security tooling, design and implement preventative controls, develop high-signal detection capabilities, and partner with engineering teams to identify and address security risks. Youll have the opportunity to shape how security evolves as the platform and company scale. Were particularly interested in engineers who have worked at rapidly growing technology companies and understand how to build effective security practices in environments where infrastructure, products, and engineering teams evolve quickly. In this role you will: Build security tooling and infrastructure. Design and implement internal tools, authentication services, proxies, and other mechanisms that enable secure, efficient access to infrastructure and sensitive resources. Secure cloud and Kubernetes infrastructure. Identify and address risks across cloud workloads, containerized environments, control planes, service-to-service communication, and the underlying systems that operate the platform. Improve application and platform security. Review architecture, code, APIs, and sensitive execution paths to identify vulnerabilities and implement practical, durable security improvements. Build detection and prevention capabilities. Develop automated checks, monitoring, and detection systems that surface high-signal security issues while minimizing noise and unnecessary operational overhead. Lead vulnerability assessment and remediation. Analyze findings from threat modeling, penetration testing, security scanning, and vulnerability disclosures; assess their real-world impact and work with engineers to prioritize and resolve them. Partner with engineering teams. Collaborate on secure architecture and design, provide actionable guidance on security best practices, and help engineers incorporate security into their development workflows. Strengthen identity and access controls. Ensure that authentication, authorization, isolation, and auditability are appropriately implemented across internal systems, infrastructure, and customer-facing services. Respond to security incidents. Investigate security issues, coordinate technical response, drive remediation, and translate lessons learned into lasting improvements. Influence product security. Work with product engineering to design and implement security capabilities that meet customer needs without compromising usability or platform performance. Inform security strategy. Engage with customers on security and compliance requirements, communicate risks and trade-offs to technical and non-technical stakeholders, and help prioritize investments in the companys security posture. Qualifications Current US or Canadian work authorization (visa transfers supported, but not new visa sponsorship) 6+ years of professional experience in software engineering, security engineering, or a combination of both. Strong engineering fundamentals and experience designing, building, and maintaining secure production systems, tools, or APIs. Practical experience across application security and infrastructure or cloud security, with the ability to investigate issues spanning both layers. Experience assessing vulnerabilities, understanding exploitability and real-world impact, and driving issues through remediation. A strong understanding of security fundamentals, including authentication, authorization, least privilege, isolation boundaries, and secure system design. The ability to operate independently, exercise sound technical judgment, and take ownership of security problems from discovery through resolution. Strong communication and collaboration skills, with the ability to work constructively with engineers and explain security trade-offs to a broader audience. A pragmatic approach to security: you know how to reduce meaningful risk while preserving engineering velocity and keeping operational overhead low. Nice-to-haves Experience securing cloud platforms, Kubernetes clusters, containerized workloads, distributed systems, or multi-tenant infrastructure. Experience at a rapidly scaling technology company, particularly one building developer infrastructure, cloud services, or a SaaS platform. Experience with Go, TypeScript, Kubernetes, PostgreSQL, Terraform, or Temporal. Experience building detection engineering capabilities, operating a SIEM, or developing security automation and monitoring pipelines. Experience with incident response, security investigations, penetration testing, exploit development, or vulnerability research. Experience conducting threat modeling, reviewing system architecture, and assessing security risks across complex services. Familiarity with SOC 2, ISO 27001, HIPAA, PCI DSS, or other security and compliance frameworks. Contributions to the security community through original research, responsible vulnerability disclosure, open-source projects, technical writing, or presentations. Compensation/Benefits $170,000-$290,000 USD base salary + equity Fully remote work (some in-person company get-togethers) 4 weeks of paid vacation 14 weeks of fully paid parental leave for all parents Long-term disability, life insurance, and 401K plans. 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and a dependent. FSAs and HSAs are available as well. Monthly lifestyle stipend for wellness, mental health and. therapy, hobbies, etc. Monthly cell phone and internet subsidy. Commuter benefits for local (San Francisco bay area) employees, and home office stipends for remote employees. Continuous learning benefits & related support. Takumi Security