Senior Software Engineer - Infrastructure Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer - Infrastructure Security based in United States . This is a senior security engineering role focused on protecting cloud infrastructure, systems, and products at scale. You’ll partner with engineering teams to embed security into architecture, development workflows, and operational practices. The role combines hands-on software engineering with cloud infrastructure security, automation, threat modeling, and incident response. You’ll help strengthen AWS and Kubernetes environments while building tools and controls that identify and mitigate security risks. You’ll also influence secure development practices and mentor engineering teams on building resilient applications and infrastructure. The position offers broad technical scope within a remote-first, collaborative engineering environment that values learning and experimentation. You’ll have significant ownership, balancing deep technical investigation with pragmatic solutions and clear prioritization. Accountabilities: - Partner with engineering teams to review cloud and compute architecture changes and identify security implications. - Develop threat models for cloud and compute platforms to identify risks and inform appropriate security controls. - Build, adopt, and maintain tools that monitor and harden cloud infrastructure and operating systems. - Develop security logging and monitoring pipelines and support intrusion detection capabilities. - Apply AWS and Kubernetes security expertise to guide remediation efforts and shape the security control roadmap. - Define and implement security policies, monitor compliance, and help ensure infrastructure remains aligned with established controls. - Develop automation and security tooling for threat detection, incident containment, network access management, and other security requirements. - Integrate security practices into engineering workflows and CI/CD environments to identify vulnerabilities earlier.

- Conduct initial security incident triage, assessing scope, urgency, and potential impact, and participate in incident response activities. - Contribute to secure coding practices, technical standards, and knowledge sharing across engineering teams. Requirements: - Strong experience as a software engineer, with deep technical capability in at least one infrastructure or security domain. - Hands-on experience securing large-scale cloud environments, particularly AWS. - Strong understanding of infrastructure-as-code and tools such as Terraform or CloudFormation. - Knowledge of AWS IAM policies, network segmentation, VPC design, cloud-native monitoring, and logging. - Experience identifying cloud misconfigurations, assessing security risks, and driving remediation. - Experience with security automation and integrating security tooling into CI/CD pipelines. - Familiarity with SAST, DAST, dependency scanning, and secure software development practices. - Strong Linux and systems security knowledge, including container security, POSIX capabilities, SECCOMP, and Linux Security Modules. - Kubernetes security experience is valuable, as is familiarity with serverless architectures, OSQuery, or eBPF. - Ability to balance technical detail with effective prioritization and right-size solutions for the problem at hand. - Strong ownership, problem-solving, time management, communication, and ability to navigate complex technical challenges. - Product security experience is a plus, including knowledge of secure web applications, APIs, OWASP Top 10, XSS, CSRF, and SQL injection. - Availability for meetings and impromptu communication during coordination hours, Monday–Friday, 9:00 AM–3:00 PM Pacific Time. Benefits: - For Toronto and Vancouver-based candidates: $221,209–$256,433 CAD + equity + benefits .