Infrastructure Security Engineer
You will build security platforms, controls, and tooling that enable secure, high-velocity cloud infrastructure operations. You will work across security, software, and infrastructure engineering to implement secure-by-default patterns, remediate vulnerabilities, improve production security, and strengthen software supply-chain controls.
Responsibilities
- Design and build security tools and guardrails that integrate into infrastructure and products
- Review application architectures, develop threat models, and implement secure-by-default patterns throughout the software development lifecycle
- Identify, prioritize, and remediate security vulnerabilities across the stack
- Ship security features that improve the security posture of production products
- Design and implement supply-chain security controls across build and deployment pipelines, including artifact signing, provenance, dynamic admission controls, and SBOM generation
Requirements
- Strong engineering background with experience building and shipping production systems
- Proven track record of building and scaling security programs
- Fluency in at least one programming language, such as Python, TypeScript, or Golang, and ability to maintain production-quality code
- Hands-on experience with AWS or GCP, Kubernetes, and Terraform
- Strong understanding of IAM, networking, PKI, and Linux internals
- Experience securing CI/CD pipelines against supply-chain attacks
- Experience securing AI or machine learning systems, including training pipelines
- Background in developer experience or platform engineering and developer tooling
- Contributions to open-source security projects, published research, or security conference talks
- Experience working in regulated environments such as SOC 2, ISO 27001, PCI, or HIPAA
Benefits
- Annual discretionary professional development stipend
- Annual discretionary social travel stipend
- Annual company offsite
- Monthly co-working stipend for employees not near main hubs