Senior Security Engineer, Infrastructure Security
New
J
JobgetherCloud security
Based in the United States; Fully remote working arrangement within the United States.Full-TimeSenior
SalaryCompetitive annual salary ranging from $160,000 to $210,000, depending on experience, qualifications, geographic location, and interview performance. Equity compensation opportunities.
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 5 years of professional experience in security engineering, cloud infrastructure, or site reliability engineering (SRE), including a minimum of 2 years securing AWS environments at organizational scale. At least 1 year of hands-on experience developing AI agents for real engineering workflows.
- Required Skills
- AWSPythonKubernetesGoTerraform
Requirements
- Have at least 5 years of professional experience in security engineering, cloud infrastructure, or site reliability engineering (SRE).
- Have at least 2 years securing AWS environments at organizational scale.
- Have at least 1 year of hands-on experience developing AI agents for real engineering workflows, including maintaining their execution environments, configurations, permissions, integrations, evaluations, and cost controls.
- Understand AI agent security risks, including prompt injection, excessive tool permissions, unaudited actions, the confused deputy problem, and the lethal trifecta.
- Have deep expertise in AWS IAM, including IAM Identity Center or equivalent SSO solutions, SCPs, permission boundaries, resource and key policies, and cross-account trust relationships.
- Be able to validate IAM policies and access configurations through policy simulation and evidence-based testing.
- Have production-level experience securing Kubernetes environments, including RBAC, workload identity, network policies, admission controls, and container runtime hardening.
- Know AWS networking and security architecture, including VPC design, endpoints and endpoint policies, network and DNS firewalls, egress controls, and WAF.
- Be proficient with infrastructure-as-code tools such as Terraform, including reusable module development, multi-environment deployments, and security-focused plan reviews.
- Have experience with CNAPP, SIEM systems, and runtime security tools, and familiarity with AWS CloudTrail, GuardDuty, and IAM Access Analyzer.
- Have experience investigating cloud and infrastructure security events using audit logs, Kubernetes activity, identity events, and network telemetry.
- Have experience conducting architecture reviews, writing technical design proposals, and guiding engineering teams toward secure solutions.
- Have strong programming and automation skills in Python, Go, or TypeScript.
- Be able to produce clear, evidence-based security documentation and recommendations for technical and non-technical stakeholders.
- Desirable: experience applying AI agents to SOC or incident response workflows; familiarity with gVisor, Firecracker, or Kata Containers; cloud and Kubernetes offensive security or red-team experience; OPA and Rego; or SOC 2 audit support.
Responsibilities
- Review infrastructure proposals and technical designs, identify security risks, and recommend practical improvements.
- Develop security architecture proposals and guide teams toward secure implementation.
- Build, evaluate, and maintain AI agents for architecture reviews, security triage, investigations, and automated workflows.
- Design and operate secure, observable, and sandboxed infrastructure for AI agents.
- Lead investigations into cloud and infrastructure security alerts and incidents, establish root causes and impact, and drive resolution.
- Strengthen identity and access controls across cloud environments, engineering systems, CI pipelines, and production infrastructure.
- Secure AWS environments, Kubernetes clusters, containerized applications, serverless workloads, and virtual machines.
- Improve network boundaries, outbound traffic controls, infrastructure endpoint security, and CI/CD pipeline safeguards.
- Develop continuous vulnerability, access, and attack-surface reviews and establish reusable security patterns in infrastructure-as-code workflows.
- Improve infrastructure security visibility and automate evidence collection for security reviews and compliance requirements.
View Full Description & ApplyYou'll be redirected to the employer's site
