Senior Security Engineer, Infrastructure Security

Role overview Secure the cloud, compute, network, and identity foundations that support a large production platform. This hands-on security engineering role combines architecture reviews, incident response, access controls, and automation, including building and operating AI agents that assist with security reviews and investigations.

Responsibilities - Review infrastructure proposals, write security recommendations, and help teams turn findings into practical design changes. - Build, evaluate, and maintain security agents and the sandboxed, observable environments in which they run. - Lead investigations of cloud and infrastructure alerts through root cause and resolution, coordinating with application security and incident responders when needed. - Improve least-privilege and just-in-time access for people, services, and CI systems across cloud accounts and production tooling. - Harden Kubernetes, serverless, virtual machine, network, and CI/CD environments, adding automated checks to prevent recurring issues. - Establish continuous monitoring for vulnerabilities, access, and attack surface, with evidence to support infrastructure controls.

Requirements - Five or more years in security engineering, cloud infrastructure, or SRE, including at least two years securing AWS at organization scale. - At least one year building and maintaining agents for real engineering work, including their tools, permissions, integrations, evaluations, and cost controls. - Ability to defend agent workflows against prompt injection, excessive permissions, and unreviewed actions; validate outputs against evidence and identify when human review is needed. - Deep AWS IAM knowledge, including organization policies, permission boundaries, cross-account trust, and policy simulation. - Production Kubernetes security experience covering access control, workload identity, network policy, admission controls, and container hardening. - AWS network security experience and fluency with infrastructure as code such as Terraform, including reviewing deployment plans for security impact.

Nice to have - Experience with AI agents in security operations or incident response, sandboxed runtimes, cloud or Kubernetes red teaming, policy-as-code, or automated audit evidence.