Staff Infrastructure Security Engineer

Skills

About the Role

You will set the technical direction for infrastructure security across the platform, designing least privilege, component isolation and tenant isolation for a multi-tenant SaaS. You will build reusable security patterns, review security-critical IaC changes, partner with engineering and product on cloud risk, and mentor other security engineers.

Requirements

• 8+ years experience in Security Engineering and/or Software Engineering
• Experience writing high-quality software and building production-grade infrastructure
• Strong fundamentals in networking, operating systems and cryptographic protocols
• In-depth knowledge of Kubernetes, common misconfigurations and privilege escalation vectors
• Ability to find weaknesses in real-world cloud environments
• Experience applying security best practices in AWS, Azure or Google Cloud
• Track record of driving cross-functional security initiatives
• Experience setting security standards at organizational scale
• Bonus: large-scale IaC, Kubernetes Admission Controllers, multi-cloud exposure

Responsibilities

• Incorporate secure design principles into cloud architecture
• Establish reusable security patterns, standards and guardrails
• Develop isolation mechanisms such as sandboxing with product engineering
• Review security-critical configuration changes and act as Codeowner for security-critical cloud configurations
• Manage risks and vulnerabilities in the cloud environment
• Translate security requirements into engineering investments
• Define infrastructure security architecture and multi-quarter roadmaps
• Mentor and develop other security engineers

Benefits

• Equity