# Security Infrastructure Engineer

**Company:** [PointOne](https://hotfix.jobs/companies/pointone)
**Location:** New York, NY
**Role:** Security Engineering
**Salary:** $160k – $220k/yr
**Experience:** 5+ years
**Skills:** AWS, IAM, Vpc, Privatelink, Security Groups, Cdk, Terraform, Kms, AWS Lambda, SQS, Rds, Guardduty
**Posted:** 2026-03-02

> Hands-on engineer owning security, scalability, and cost optimization of AWS infrastructure. Hardens IAM, networking, secrets management; leads threat modeling, incident response, and architecture reviews for high-sensitivity legal systems. Requires 5+ years AWS production experience.

## Job Description

## What You'll Own

### Infrastructure Security
- Design and enforce least-privilege IAM across services
- Implement permission boundaries and SCP strategy
- Reduce attack surface across networking and service exposure
- Improve secrets management and KMS key segmentation
- Lead threat modeling across core systems
- Design blast-radius containment strategies

### Detection & Response
- Strengthen logging, monitoring, and anomaly detection
- Ensure logs are immutable and auditable
- Build and test incident response playbooks
- Review new infrastructure designs for security risks

### Scale & Cost
- Optimize AWS architecture for reliability and efficiency
- Improve Lambda/SQS concurrency and scaling patterns
- Evaluate and improve RDS scaling strategy
- Drive principled tradeoffs between isolation, performance, and cost

## What We're Looking For
- 5+ years operating AWS infrastructure in production
- Deep IAM expertise (roles, policies, trust relationships, STS)
- Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
- Experience designing multi-account AWS environments
- Hands-on experience responding to real security incidents
- Strong understanding of cloud attack vectors and privilege escalation
- Experience reducing cloud cost without compromising security
- Comfortable working directly in CDK/Terraform and reviewing infrastructure code

**Strong plus:** Experience in legal, fintech, government, or other high-sensitivity environments.

## Similar roles

- [Security Engineer](https://hotfix.jobs/jobs/be1ae539-4e2e-462f-aedd-c2ac34023a86) - Skydio - San Mateo, CA - $160k – $210k/yr
- [Security Platform Engineer](https://hotfix.jobs/jobs/534da07b-38bd-4a83-be3d-33ff3a4d7c51) - Lumin Digital - Remote - $160k – $180k/yr
- [Software Engineer - Secret, Cryptographic and Identity Infrastructure](https://hotfix.jobs/jobs/a918f997-7c56-44bb-9b30-9a92afad2937) - Snowflake - Bellevue, WA - $160k – $230k/yr
- [Software Engineer - Trust Center](https://hotfix.jobs/jobs/eca646e8-2ac5-42be-8887-68e227b5b842) - Snowflake - Bellevue, WA - $160k – $230k/yr
- [Security Engineer](https://hotfix.jobs/jobs/3e8573ef-e06e-4e0e-907b-299b0e307a11) - Juicebox - San Francisco, CA - $160k – $250k/yr

**Apply:** https://hotfix.jobs/jobs/1fb7499e-0f95-40d3-bc9b-28f07610453e
**Canonical:** https://hotfix.jobs/jobs/1fb7499e-0f95-40d3-bc9b-28f07610453e