Staff Infrastructure Security Engineer

Responsibilities

• Incorporate secure design principles into cloud architecture.
• Establish reusable security patterns, standards, and guardrails for secure-by-default product and platform development.
• Develop isolation mechanisms such as sandboxing with product engineering teams.
• Review security-critical configuration changes and act as Codeowner for security-critical cloud configurations managed through infrastructure as code.
• Manage cloud-environment risks and vulnerabilities and translate security requirements into engineering investments.
• Define infrastructure security architecture and multi-quarter roadmaps.
• Mentor and develop security engineers and raise the team’s technical bar.

Requirements

• Require 8+ years of experience in security engineering and/or software engineering.
• Demonstrated experience writing high-quality software, building production-grade infrastructure, and improving security across engineering teams.
• Strong fundamentals in networking, operating systems, and cryptographic protocols.
• In-depth knowledge of Kubernetes, common misconfigurations, and privilege-escalation vectors.
• Demonstrated ability to identify weaknesses in real-world cloud environments.
• Experience applying security best practices in AWS, Azure, or Google Cloud environments.
• Track record of leading cross-functional security initiatives and influencing engineering decisions across teams.
• Experience setting security standards and best practices at organizational scale.
• Experience with generative AI or legal is not required.
• Bonus: familiarity with large-scale infrastructure-as-code deployments, Kubernetes Admission Controllers, policy enforcement, and multi-cloud environments.