Security Engineer, Product & Production Infrastructure

Overview

Security Engineer responsible for securing products, CI/CD infrastructure, and production infrastructure in cloud-native environments. The role covers security reviews, vulnerability management, and detection and response operations.

What you'll do

• Lead threat modeling and security reviews across products and cloud infrastructure.
• Build automation, policy-as-code, and security tooling for development workflows.
• Design secure baselines for cloud resources and Kubernetes infrastructure.
• Drive vulnerability prioritization, remediation, and preventative controls across software supply chains.
• Extend detection and response capabilities to identify, triage, investigate, and remediate incidents.
• Extend DevSecOps and product security practices to the FedRAMP environment.
• Partner with engineering and operations teams on secure-by-design solutions.

What you'll need

• 7+ years of security engineering or security operations experience in cloud environments.
• Experience with AWS cloud security or equivalent Azure and GCP experience with some AWS experience.
• Experience with cloud-native Kubernetes services and container security principles.
• Experience securing IAM and cloud identities at scale.
• Experience leading technical security reviews and threat modeling exercises.
• Understanding of web application security concepts, including OWASP Top 10.
• Experience with IaC tools and automation or tooling development in Python, Go, Shell, HCL, or Rego.

Nice to have

• Bachelor's degree in computer science or a related field, or equivalent job experience.
• Experience working with remote, globally distributed teams.
• Experience with CNAPP, CSPM, or CIEM solutions.

Details

• Remote in the USA.
• Full-time position.
• US base salary range: $207,000–$283,000 yearly.