# Senior Staff Information Security Engineer

**Company:** [NMI](https://hotfix.jobs/companies/nmi)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $145k – $165k/yr
**Experience:** 7+ years
**Skills:** AWS, identity and access management, infrastructure-as-code, policy-as-code, Python, Go, CI/CD, Kubernetes, container security, Threat Modeling, Vulnerability Management, Incident Response, SIEM, Terraform, network security
**Posted:** 2026-08-03

> Senior individual contributor leading security architecture and automated controls across AWS, on-premises, and hybrid infrastructure. The role requires deep AWS security expertise, infrastructure-as-code and CI/CD experience, scripting ability, and cross-functional technical leadership.

## Job Description

## Responsibilities

### Lead Infrastructure Security Architecture
- Define and evolve security architecture across AWS and colocation environments.
- Establish secure reference architectures, engineering standards, and reusable control patterns.
- Provide technical leadership for infrastructure, platform, and product initiatives.
- Identify systemic risks and lead sustainable programs to address them.

### Strengthen Cloud and Hybrid Security
- Design and improve security across cloud accounts, networks, identities, workloads, and shared services.
- Establish controls for identity and access management, segmentation, encryption, secrets, logging, monitoring, and workload protection.
- Develop preventative guardrails through infrastructure-as-code, policy-as-code, automation, and cloud-native security services.
- Improve consistency across cloud, on-premises infrastructure, and hybrid connectivity.

### Partner with Engineering and Product
- Engage early in the design of products, platforms, services, and integrations.
- Lead threat modeling, security architecture reviews, and technical risk assessments.
- Translate security risks into practical engineering recommendations.
- Help teams adopt secure-by-design principles through reusable patterns, tooling, and documentation.

### Build, Automate, and Apply AI
- Design and implement security tooling, integrations, and automated controls.
- Embed security capabilities into infrastructure provisioning, engineering workflows, and CI/CD pipelines.
- Use AI-assisted tooling for scripting, detection development, alert analysis, vulnerability triage, threat modeling, and technical documentation.
- Validate AI-generated outputs and apply appropriate controls for confidentiality, accuracy, access, and human oversight.

### Improve Risk Reduction and Resilience
- Provide technical direction for vulnerability and exposure management across AWS and on-premises infrastructure.
- Identify recurring patterns across incidents, penetration tests, vulnerabilities, and control assessments.
- Act as a senior technical escalation point during significant security incidents.
- Ensure investigations and lessons learned produce durable architectural and engineering improvements.

### Provide Senior Technical Leadership
- Lead complex security initiatives spanning multiple teams and planning cycles.
- Mentor security engineers and guide engineers in adjacent teams.
- Raise standards for security architecture, automation, documentation, and technical decision-making.
- Communicate security risks and recommendations to technical teams, product leaders, and senior stakeholders.

## Requirements
- Significant experience in security engineering, infrastructure security, cloud security, security architecture, or platform engineering.
- Deep hands-on experience securing AWS environments.
- Strong knowledge of AWS identity and access management, network architecture, account governance, encryption, logging, monitoring, secrets management, and workload protection.
- Experience designing or securing on-premises, data-center, or colocation-hosted infrastructure.
- Strong knowledge of enterprise networking, segmentation, firewalls, secure remote access, privileged administration, and hybrid connectivity.
- Experience with infrastructure-as-code, CI/CD security, containerized environments, and cloud-native platforms.
- Demonstrated experience designing and implementing automated security controls and engineering solutions.
- Proficiency with Python, Go, or a comparable language.
- Practical experience using AI-assisted tooling to improve security engineering and operational workflows.
- Experience leading complex initiatives across engineering, infrastructure, or product teams.
- Strong knowledge of security architecture, threat modeling, vulnerability management, detection, and incident response.
- Ability to operate independently, navigate ambiguity, and influence technical and leadership audiences.

## Nice-to-Haves
- Advanced AWS certification in security, architecture, networking, or cloud engineering.
- Experience in fintech, payments, SaaS, or another regulated technology environment.
- Experience securing large or complex AWS multi-account estates.
- Experience with Kubernetes, container security, software supply-chain security, and policy-as-code.
- Experience with CNAPP, CSPM, SIEM, EDR, DLP, WAF, vulnerability-management, network-security, or secrets-management platforms.
- Familiarity with PCI DSS, SOC 2, GDPR, NIST, or ISO 27001.
- Experience supporting significant security incidents, penetration tests, audits, or customer security assessments.

## Compensation and Benefits
- Competitive salary plus bonus
- Flexible paid time off
- Health, dental, and vision insurance
- 13 paid holidays
- Company volunteer days

## Similar roles

- [Staff Cloud Security Engineer](https://hotfix.jobs/jobs/aa980ffc-df45-4961-97ec-011928aba41d) - NinjaTrader - Chicago, IL - $145k – $195k/yr
- [Staff Security Analyst, Customer Assurance](https://hotfix.jobs/jobs/2d005923-38d8-445f-9fe3-28bb3ab71a8a) - Okta - Bellevue, WA - $148k – $204k/yr
- [Staff Product Security Engineer](https://hotfix.jobs/jobs/049ea363-7a08-4041-a40c-8ef13a669441) - Okta - Bellevue, WA - $141k – $248k/yr
- [Member of Technical Staff II](https://hotfix.jobs/jobs/dd53eb25-fb53-42c1-ad77-cb735c8819de) - Illumio - Sunnyvale, CA - $141k – $162k/yr
- [Staff Security Engineer](https://hotfix.jobs/jobs/0101700c-8fbe-4218-ab4e-13b0bc3c0fc0) - LiveKit - Remote - $150k – $250k/yr

**Apply:** https://hotfix.jobs/jobs/19031bec-5087-41a6-9c14-ec544b40f8cd
**Canonical:** https://hotfix.jobs/jobs/19031bec-5087-41a6-9c14-ec544b40f8cd