Senior Infrastructure Security Engineer
New
J
JobgetherAI insurance technology
US; based in United StatesFull-TimeSenior
SalaryAnnual salary ranging from US$170,000 to US$210,000, with final offers determined by experience, expertise, and geographic location. Canadian compensation should be confirmed with the hiring team. Stock options
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 5 years of hands-on experience managing cloud infrastructure, infrastructure automation, and production environments; at least 3 years of practical experience working with cloud providers; at least 3 years of experience deploying, managing, and maintaining Kubernetes clusters in production environments.
- Required Skills
- Node.jsPythonGCPKafkaKubernetesPrometheusTerraformGitHub Actions
Requirements
- Have at least 5 years of hands-on experience managing cloud infrastructure, infrastructure automation, and production environments.
- Have experience supporting or achieving SOC 2 Type II, ISO 27001, or equivalent security and compliance certifications.
- Have at least 3 years of practical experience working with cloud providers, preferably GCP.
- Have at least 3 years of experience deploying, managing, and maintaining production Kubernetes clusters.
- Understand cloud-native infrastructure, containerization, infrastructure as code, and automated deployment practices.
- Have practical experience with Terraform, Argo, and GitHub Actions.
- Have experience with Node.js or Python for backend services, particularly in microservices architectures.
- Be familiar with asynchronous processing, message queues, and event-driven architectures, including Kafka and Google Pub/Sub.
- Understand security engineering, vulnerability management, secure software development, incident response, and remediation.
- Understand business continuity planning, disaster recovery, operational resilience, and security risk management.
- Have experience with Sentry, Prometheus, Grafana, and Alertmanager, and familiarity with k6 or equivalent performance testing tools.
Responsibilities
- Coordinate incident responses, investigate security incidents, and implement remediation measures.
- Improve and document incident management procedures.
- Strengthen the Secure Software Development Lifecycle and vulnerability detection and remediation workflows.
- Oversee vulnerability scanning and ensure security issues are prioritized and addressed on time.
- Develop security documentation, educational resources, and awareness materials for engineering teams.
- Build tools and automations to improve customer security questionnaire handling.
- Develop business continuity and disaster recovery plans and coordinate recurring recovery exercises.
- Support engineering teams with infrastructure for new features, services, and platform capabilities.
- Automate infrastructure management and deployment workflows using Terraform, Argo, and GitHub Actions.
- Manage GCP and GKE environments and improve observability, monitoring, and performance testing.
View Full Description & ApplyYou'll be redirected to the employer's site
