Senior Security Infrastructure Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Oversee and manage vulnerability management across infrastructure, platforms, and applications, which includes conducting internal scans, performing dependency analysis, and evaluating external findings while validating true positives and facilitating remediation with engineering teams.

• Develop, operate, and enhance SIEM/XDR capabilities, encompassing log ingestion, creation of detection rules, alert tuning, and investigation workflows.

• Examine and respond to security incidents within cloud infrastructure and applications, executing root cause analysis and implementing long-term solutions.

• Create and implement detection strategies for suspicious activities, including identifying data exfiltration patterns through application and database telemetry.

• Lead and participate in threat modeling initiatives and security design reviews to detect risks early and fortify architecture.

• Utilize extensive expertise in AWS and Kubernetes to design, secure, and enhance resilient and secure cloud infrastructure at scale.

• Propel initiatives for hardening infrastructure and CI/CD processes, focusing on minimizing risks associated with software and container supply chains.

• Spearhead the implementation and enhancement of systems and controls for detecting risks within dependency and container supply chains.

• Collaborate closely with engineering teams to address vulnerabilities and enhance secure development and deployment practices.

• Support and enforce security controls that comply with PCI DSS, SOC 2, and other regulatory requirements.

• Design and implement automation solutions (including AI where applicable) to boost efficiency in security operations, detection, and response.

• Assess and validate external security findings, differentiating true positives and coordinating remediation efforts.

⛳️ Requirements

• Minimum of 6 years of experience in security, software, or infrastructure engineering, with practical experience in securing cloud-based production systems and addressing real-world security challenges.

• Proven experience in contributing to threat modeling and security design reviews for contemporary systems.

• Extensive hands-on experience in vulnerability management, covering scanning, triage, validation, coordination of remediation, and verification.

• Familiarity with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response.

• Practical experience in triaging findings from vulnerability scanners and bug bounty programs.

• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices.

• Experience in enhancing infrastructure security, encompassing CI/CD hardening and mitigating software supply chain risks.

• Proficiency with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.).

• Ability to investigate issues directly using logs, cloud tools, and system-level data.

• Familiarity with common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.).

• Working knowledge of compliance frameworks such as PCI DSS and SOC 2.

🏝️ Benefits

• Flexible work-from-home options.