Senior Security Engineer, Infrastructure Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Assess infrastructure proposals and designs from both engineering and non-engineering teams.

• Develop security proposals and evaluate subsequent modifications.

• Convert security requirements and findings from agents into guidance for partners with less technical expertise.

• Create, assess, and sustain agents for conducting reviews, triage, and investigations.

• Assist in operating sandboxed, observable infrastructure for security agents.

• Oversee cloud and infrastructure alerts and incidents until resolution and root cause analysis.

• Work alongside AppSec and incident response teams on cross-functional incidents.

• Promote least-privilege and just-in-time access for individuals, CI, and services within the cloud organization.

• Provide secure building blocks that teams will utilize by default.

• Strengthen container, serverless, and virtual machine workloads, network perimeter, and CI/CD pipelines.

• Implement automated checks to avert recurring security issues.

• Transition vulnerability, access, and attack-surface reviews to continuous monitoring while generating infrastructure-control audit evidence.

⛳️ Requirements

• Over 5 years of experience in security engineering, cloud infrastructure, or SRE, with a minimum of 2 years focused on securing AWS at an organizational scale.

• At least 1 year of experience in agentic development, which includes building agent skills and tools, managing development harnesses, and overseeing configuration, permissions, integrations, evaluations, and cost controls.

• Capability to secure agents against prompt injection, over-privileged tools, and unaudited actions; articulate the confused deputy problem and lethal trifecta; validate agent output against evidence and identify when human review is necessary.

• Extensive experience with AWS IAM, encompassing IAM Identity Center or comparable SSO, SCPs, permission boundaries, resource and key policies, cross-account trust, and policy simulation.

• Experience in production Kubernetes security on EKS or similar platforms, including RBAC, workload identity, network policy, admission control, and container runtime hardening.

• Knowledge of AWS networking security, covering VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF.

• Proficiency in infrastructure as code, such as Terraform, including reusable patterns, multi-environment rollouts, and security-impact plan reviews.

• Familiarity with CNAPP, SIEM, or runtime security tools, and cloud detection sources like CloudTrail, GuardDuty, and Access Analyzer.

• Experience in investigating cloud and infrastructure security incidents using cloud audit, Kubernetes, identity, and network logs.

• Proven history of conducting architecture reviews, design proposals, providing secure design guidance, mentoring through reviews, and driving accepted changes.

• Proficient in Python, Go, or TypeScript for security automation.

• Strong written and verbal communication skills, including the ability to explain technical risks to non-technical partners.

• Desirable: Experience with AI agents in SOC or incident response workflows; familiarity with sandboxed runtimes like gVisor, Firecracker, or Kata; offensive security or cloud/Kubernetes red-team experience; OPA or Rego; automated SOC 2 evidence collection.

🏝️ Benefits

• Equity

• 401k

• Health, Dental, and Vision insurance

• Spending accounts

• Life & Disability

• Paid parental leave

• Flexible paid time off

• Enhanced employee assistance program

• Employee wellness stipend

• Professional development stipend