Senior Software Engineer - Infrastructure Security
New
Q
QuoraInfrastructure security
This position can be performed remotely from anywhere in Canada or the United States., Availability for meetings and impromptu communication during Quora's coordination hours (Mon-Fri: 9am-3pm Pacific Time).Full-TimeSenior
SalaryUS candidates only: For US based applicants, the salary range is $172,279 - $249,640 USD + equity + benefits. Canada candidates only: For Toronto and Vancouver based applicants, the salary range is $221,209 - $256,433 CAD + equity + benefits. For all other locations in Canada, the salary range is $206,461 - $239,337 CAD + equity + benefits.
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSKubernetesCI/CDTerraformCloudFormation
Requirements
- Be a capable software engineer.
- Have expertise in at least one of cloud infrastructure security, automation and secure development practices, or Linux/system security.
- Have hands-on experience securing large-scale cloud environments, particularly AWS, for the cloud infrastructure security specialization.
- Have experience with infrastructure-as-code pipelines using Terraform or CloudFormation.
- Understand IAM policies, network segmentation, VPC design, and monitoring and logging in cloud-native environments.
- Be skilled at identifying cloud misconfigurations, mitigating risks, and driving remediation.
- Be able to develop and integrate security tools into CI/CD pipelines, including SAST, DAST, and dependency scanning.
- Understand secure coding practices and be able to mentor teams in building resilient, secure applications.
- Have knowledge of container security, POSIX capabilities, SECCOMP, and Linux Security Modules for the Linux/system security specialization.
- Be available for meetings and impromptu communication during coordination hours, Monday through Friday, 9am-3pm Pacific Time.
Responsibilities
- Partner with engineering teams to review cloud and compute architecture design changes.
- Establish threat models for cloud and compute paved roads to identify security risks.
- Develop or adopt open-source tools to monitor and harden cloud infrastructure and operating systems.
- Develop security logging pipelines and detect intrusions.
- Apply AWS and Kubernetes security best practices to inform remediations and the team's control roadmap.
- Drive the definition and implementation of security policies and monitor conformance.
- Write automation code for threat detection, incident containment, and network access management.
- Conduct initial incident triage, determine scope, urgency, and potential impact, and participate in incident response.
View Full Description & ApplyYou'll be redirected to the employer's site
