Infrastructure Security Engineer

Build and operate secure cloud and hybrid infrastructure while improving detections and security operations for cloud-native applications.

Responsibilities

• Design and implement secure cloud architectures across multiple platforms such as AWS, GCP, and Azure
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Create and maintain Infrastructure as Code (IaC) templates with embedded security controls
• Support regular security assessments and audits for cloud infrastructure and services
• Implement and manage cloud security tooling such as CSPM, CWPP, and CASB
• Manage identities and roles across cloud and hybrid environments
• Monitor and remediate infrastructure to align with regulations and best practices including PCI, NIST CSF, GDPR, and HIPAA
• Design and implement secure container standards and automation to enable developer workflows
• Maintain Kubernetes security aligned with current best practices
• Collaborate with development teams to integrate security into CI/CD pipelines
• Secure and enhance CI/CD pipelines, including integration and maintenance of code scanning platforms
• Monitor, investigate, and respond to security events and incidents in cloud and hybrid environments
• Maintain SIEM data pipelines to support reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management such as Puppet
• Develop dashboards and alerts driven by security metrics
• Define and maintain cloud security policies, standards, and procedures
• Drive security projects end to end from issue identification through solution implementation
• Stay current on emerging cloud security threats and mitigation strategies

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 3–5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency with at least one cloud platform: AWS, GCP, or Azure, plus associated security services
• Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and security posture management
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Scripting experience for automation and tool development, including Python and Bash
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate

Technologies

• AWS, GCP, Azure
• Infrastructure as Code (IaC)
• CSPM, CWPP, CASB
• PCI, NIST CSF, GDPR, HIPAA
• Kubernetes
• CI/CD
• SIEM
• Python, Terraform, Puppet, CloudFormation, Bash
• IAM
• Prometheus, Grafana, CloudWatch, Wazuh
• GitHub Actions
• GitHub

Preferred skills and experience

• Relevant security certifications (e.g., CCSP, CSSK, AWS Security Specialty)
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
• Strong proficiency with Python, Terraform, and configuration management such as Puppet
• Hands-on experience building GitHub Actions and workflows
• Experience in observability and security operations tooling, including Prometheus, Grafana, CloudWatch, and SIEM platforms such as Wazuh
• Experience building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience securing AI/ML workloads in cloud environments
• Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms

Benefits

• Equity
• Comprehensive medical, vision, and dental coverage
• Access to a 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Various other discounts and perks

Compensation

• $100,000 - $258,000 USD base salary
• Total rewards include equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, and various other discounts and perks

Location: New York, NY (onsite)

Experience level: 3+ years