Senior Security Infrastructure Engineer

Overview

Own and evolve security for production and cloud environments, focusing on network and infrastructure security. Lead secure architecture, risk mitigation, and security enablement across engineering and operations teams.

What you'll do

• Design and improve network segmentation, WAF controls, egress filtering, and remediation sequencing.
• Review cloud environments for exposed storage, open management ports, logging gaps, stale credentials, and excessive privileges.
• Monitor the external attack surface using DNS, certificate transparency logs, IP-range scanning, and ASM tooling.
• Detect configuration drift and assign ownership for discovered assets.
• Partner with engineering and operations teams on design reviews, change management, and secure-by-default patterns.
• Coach teams through security reviews, consultations, and targeted training.
• Identify risks and determine mitigation strategies.

What you'll need

• Experience guiding engineering teams through end-to-end secure system design.
• Experience with network segmentation and production firewall or IDS-IPS platforms.
• Experience reviewing cloud identity, permissions, exposure, logging, network rules, and secrets.
• Primary focus on Microsoft Azure permissions and configuration.
• Working knowledge of Google Cloud Platform and on-premises components.
• Strong communication skills for technical and non-technical audiences.
• Ability to lead technical direction for cybersecurity defense and security posture management.

Nice to have

• Security certifications such as CISSP, GIAC, or CCNP Security.
• Experience with DSPM or cloud-native data security controls.
• Cloudflare WAF experience.

Details

• Remote position for residents of Cyprus.