Senior Security Engineer, Infrastructure Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer, Infrastructure Security based in the United States. We are seeking an experienced Infrastructure Security Engineer to strengthen and scale the security of a complex, cloud-native technology environment. In this role, you will protect critical infrastructure spanning cloud platforms, Kubernetes, networking, identity systems, and development pipelines. You will design and implement security solutions, lead threat investigations, and build intelligent automation to improve security operations and resilience. A key part of your mission will involve developing and maintaining AI-powered security agents that automate architecture reviews, investigations, and threat detection. Working closely with engineering, application security, and incident response teams, you will promote secure-by-design practices and least-privilege access across the organization. This is an opportunity to combine deep technical expertise, innovative security engineering, and AI-driven automation within a collaborative, remote-first environment. Accountabilities: - Infrastructure Security Architecture: Review infrastructure proposals and technical designs across engineering and business teams, identify security risks, and recommend practical improvements. Develop security architecture proposals and guide teams toward secure implementation through constructive collaboration. - AI-Powered Security Automation: Build, evaluate, and maintain AI agents used for architecture reviews, security triage, investigations, and automated workflows. Help design and operate secure, observable, and sandboxed infrastructure for these agents.

- Threat Detection and Incident Response: Lead investigations into cloud and infrastructure security alerts and incidents, coordinating with application security and incident response teams when issues span multiple security domains. Identify root causes, assess potential impact, and drive incidents through resolution. - Identity and Access Management: Strengthen identity and access controls across cloud environments, engineering systems, CI pipelines, and production infrastructure. Implement least-privilege and just-in-time access models for employees, services, and automated workloads. - Cloud and Infrastructure Protection: Secure AWS environments, Kubernetes clusters, containerized applications, serverless workloads, and virtual machines through effective defensive controls and security configurations. - Network and Pipeline Security: Strengthen network boundaries, control outbound traffic, secure infrastructure endpoints, and improve CI/CD pipeline security through automated checks and preventive safeguards. - Continuous Security Monitoring: Develop continuous vulnerability, access, and attack-surface reviews to replace periodic assessments with ongoing monitoring and actionable security insights. - Infrastructure as Code Security: Establish reusable security patterns and automated controls within infrastructure-as-code workflows, ensuring security requirements are consistently applied across environments. - Audit and Compliance Support: Improve infrastructure security visibility and automate evidence collection to support internal security reviews and external compliance requirements. - Cross-functional Collaboration: Work closely with engineering, business systems, go-to-market, and security teams to translate complex technical findings into clear recommendations and practical improvements. - Security Mentorship and Documentation: Produce well-documented security findings, architecture reviews, and technical proposals that enable teams to take action independently. Mentor colleagues and promote a culture of secure engineering practices.