Senior Infrastructure Security Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Infrastructure Security Engineer based in United States.

This is an exciting opportunity to join a fast-growing technology organization developing an AI-native platform that is transforming traditional insurance operations. As a Senior Infrastructure Security Engineer, you will play a dual role in strengthening cloud infrastructure and establishing robust security practices across the engineering organization. You will oversee critical infrastructure, cloud environments, Kubernetes operations, automation, and system observability while driving improvements to security processes and compliance standards. Working closely with engineering and cross-functional teams, you will help ensure that systems remain secure, scalable, reliable, and resilient as the business expands. You will also contribute to incident response, disaster recovery planning, and the continuous improvement of secure software development practices. This role offers the opportunity to take ownership of impactful technical initiatives, work with modern cloud-native technologies, and help shape the security foundations of an innovative AI-driven platform.

• Support incident management and resolution activities, helping coordinate responses, investigate security incidents, and implement effective remediation measures.
• Lead the continuous improvement of incident management procedures, ensuring that established processes are documented, followed consistently, and regularly reviewed.
• Strengthen the Secure Software Development Lifecycle (SSDLC) by implementing security improvements across software development processes, vulnerability detection, and remediation workflows.
• Oversee vulnerability scanning and remediation activities, ensuring identified security issues are prioritized and addressed within established timelines.
• Develop security documentation, educational resources, and awareness materials to help engineering teams adopt secure development practices.
• Streamline the handling of customer security questionnaires by developing tools, automations, and systems that improve response efficiency and accuracy.
• Assess potential business continuity risks and develop comprehensive disaster recovery and business continuity plans.
• Coordinate recurring disaster recovery exercises and validate the effectiveness of established recovery procedures.
• Collaborate with cross-functional engineering teams to provide infrastructure support for new features, services, and platform capabilities.
• Improve and automate infrastructure management and deployment workflows using tools such as Terraform, Argo, and GitHub Actions.
• Manage, maintain, and optimize Google Cloud Platform (GCP) infrastructure and Kubernetes (GKE) environments, ensuring scalability, availability, performance, and reliability.
• Enhance the organization's observability capabilities by maintaining and improving monitoring systems using Sentry, Prometheus, Grafana, and Alertmanager.
• Implement and maintain performance monitoring solutions, including k6 and similar tools, to identify bottlenecks, monitor system health, and support capacity planning.
• Establish proactive monitoring and alerting mechanisms to detect operational issues early and minimize service disruptions.
• Collaborate with backend engineering teams to support reliable microservices architectures, asynchronous processing, and event-driven infrastructure.
• Contribute to compliance and security initiatives, supporting the implementation and maintenance of industry-recognized standards and certifications.
• Identify opportunities to improve internal engineering efficiency, infrastructure reliability, security maturity, and operational processes.

Requirements:

• At least 5 years of hands-on experience managing cloud infrastructure, infrastructure automation, and production environments.
• Demonstrated experience supporting or achieving security and compliance certifications such as SOC 2 Type II, ISO 27001, or equivalent frameworks.
• At least 3 years of practical experience working with cloud providers, preferably Google Cloud Platform (GCP).
• At least 3 years of experience deploying, managing, and maintaining Kubernetes clusters in production environments.
• Strong understanding of cloud-native infrastructure, containerization, infrastructure-as-code principles, and automated deployment practices.
• Practical experience with infrastructure automation and orchestration tools such as Terraform, Argo, and GitHub Actions.
• Experience with Node.js or Python for backend services, particularly within microservices-based architectures.
• Familiarity with asynchronous processing, message queues, and event-driven architectures, including technologies such as Kafka and Google Pub/Sub.
• Knowledge of security engineering principles, including vulnerability management, secure software development practices, incident response, and remediation processes.
• Understanding of business continuity planning, disaster recovery strategies, operational resilience, and security risk management.
• Experience implementing observability and monitoring solutions using tools such as Sentry, Prometheus, Grafana, and Alertmanager.
• Familiarity with performance testing and monitoring tools, including k6 or equivalent solutions.
• Strong analytical and troubleshooting skills, with the ability to investigate complex infrastructure and security issues and develop effective solutions.
• Excellent collaboration and communication skills, with the ability to work across engineering teams and support internal stakeholders.
• A proactive, ownership-driven mindset, with a strong focus on improving internal engineering productivity, operational efficiency, and technical reliability.
• Ability to adapt to a fast-paced, evolving technology environment and continuously learn emerging cloud, infrastructure, and security technologies.

Benefits:

• Competitive compensation: Annual salary ranging from US$170,000 to US$210,000, with final offers determined by experience, expertise, and geographic location. Canadian compensation should be confirmed with the hiring team.
• Equity participation: Stock options, providing an opportunity to participate in the organization's long-term growth.
• Comprehensive benefits package: Access to employee benefits and additional perks.
• Remote working environment: Opportunity to work remotely while collaborating with a distributed engineering team.
• Professional growth: Work with advanced AI technologies and modern cloud-native infrastructure while developing expertise in security engineering and platform reliability.
• Technical ownership: Significant opportunities to lead infrastructure and security initiatives and influence engineering standards and practices.
• Innovative culture: Join a fast-growing organization that values experimentation, first-principles thinking, continuous learning, and practical problem-solving.
• Collaborative environment: Work alongside talented engineering professionals who value transparency, teamwork, adaptability, and shared success.
• Meaningful impact: Help build secure, scalable, and resilient infrastructure supporting the transformation of the insurance industry through AI.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1