Infrastructure Security Engineer
Build and ship security tooling, guardrails, and supply-chain controls across cloud infrastructure and products. The role requires production engineering experience, cloud-native security expertise, programming ability, and hands-on vulnerability remediation.
About the job
Responsibilities
- Design and build security tools and guardrails that integrate directly into infrastructure and products.
- Partner with Engineering and Infrastructure teams to review application architectures, develop threat models, and build secure-by-default patterns throughout the software development lifecycle.
- Identify, prioritize, and remediate security vulnerabilities across the stack, working directly with engineers and contributing to fixes where required.
- Ship security features that improve the security posture of products in production.
- Design and implement supply-chain security controls across build and deployment pipelines, including artifact signing, provenance, dynamic admission controls, and SBOM generation.
Requirements
- Strong engineering background with experience building and shipping production systems.
- Proven track record of building and scaling security programs.
- Fluency in at least one programming language, such as Python, TypeScript, or Golang, with the ability to read, write, and maintain production-quality code.
- Hands-on experience in cloud-native environments, including AWS or GCP, Kubernetes, and infrastructure as code with Terraform.
- Strong understanding of cloud security fundamentals, including IAM, networking, PKI, and Linux internals.
- Experience securing CI/CD pipelines to prevent supply-chain attacks.
Nice to Have
- Experience securing AI or machine-learning systems, including training pipelines.
- Background in developer experience or platform engineering, especially building developer tooling.
- Contributions to open-source security projects, published research, or talks at security conferences.
- Experience working in regulated environments such as SOC 2, ISO 27001, PCI, or HIPAA.
Benefits
- Annual discretionary professional development stipend.
- Annual discretionary stipend for social travel with colleagues.
- Annual company offsite.
- Monthly coworking stipend for employees not located near a main hub.
Skills
Python, TypeScript, Go, AWS, GCP, Kubernetes, Terraform, IAM, Pki, Linux, CI/CD, Sbom
Similar jobs
Security Engineering jobs
Writer
London, United Kingdom
Build and scale application security for an enterprise AI platform through threat modeling, secure architecture, automated controls, code review, penetration testing, and AI/ML threat research. Requires 4+ years of application security experience and proficiency in at least two programming languages.
Stripe
Dublin, Ireland
Investigates high-risk accounts and leads incident response for fraud and product-abuse events, using behavioral analysis and threat intelligence to identify root causes and improve detection. Requires 3+ years of incident response and fraud-data analysis experience, plus strong Python and SQL skills.
Stripe
Seattle, WAInvestigates and leads response to high-risk fraud and product-abuse incidents, analyzes threat patterns, and drives root-cause and prevention improvements. Requires 3+ years of incident response and fraud-oriented data analysis, plus Python, SQL, and security investigation expertise.
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Retell AI
United StatesBuild and automate technical security controls, compliance workflows, and audit evidence for enterprise readiness. The role requires strong scripting or programming skills, security fundamentals, and the ability to collaborate across engineering, security, legal, and customer-facing teams.