Senior Infrastructure Engineer, Cloud Security

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Developing our AWS account strategy, VPC architecture, and workload segmentation as our infrastructure expands.

• Managing our firewalls and edge security strategy across our cloud environment.

• Improving our IaC security scanning, governance of Terraform modules, and pipeline security for infrastructure deployments.

• Taking ownership of our vulnerability management, misconfiguration detection, and SIEM strategy.

• Establishing the security standards for our AI products and AI-related developer tools, collaborating with product, InfoSec, and IT teams.

• Participating in daily Cloud Infrastructure activities alongside your security expertise, including Terraform reviews, platform backlog management, and on-call rotations.

⛳️ Requirements

• Over 6 years of hands-on experience in cloud engineering, with significant time focused on cloud security in production environments — including IAM, network architecture, blast-radius reduction, and vulnerability management.

• Proficient in writing production-level Terraform and experienced in creating custom IaC security scanning rules, version pinning for modules, and securing CI/CD pipelines.

• Extensive experience with at least one major cloud provider (AWS preferred, GCP acceptable), covering account strategy, network design, and least-privilege IAM principles.

• Approaches detection as a product and has experience in consolidating vulnerability and misconfiguration programs to reduce noise from tooling.

• Familiar with various SIEM strategies — whether vendor-hosted, self-operated, or hybrid — and capable of making informed decisions based on organizational scale and risk tolerance.

• Advocates for secure defaults and streamlined processes over gates and approvals, aiming for low-friction compliance.

• Possesses an understanding of the security implications surrounding LLMs, agents, and AI-enabled developer tools, and can establish a reasonable safety threshold for their adoption.

• Works well within a collaborative Cloud Infrastructure team and effectively partners with InfoSec, IT, and company-wide security functions.

🏝️ Benefits

• Health, Dental & Vision Plans

• Competitive Pay

• 401k Matching

• Unlimited PTO

• Lunch provided daily (in-office only)

• Snacks & Coffee available (in-office only)

• Commuter benefits (in-office only)