Remote job
Security Engineer, Infrastructure Security
Job details
About this role
Role overview
Improve the security of the cloud and production infrastructure that handles customer audio, video, and data. You’ll assess the current security posture, work with engineering to prioritize and fix meaningful risks, and build reusable safeguards that help security keep pace as the platform grows.
Responsibilities
- Document a security baseline for cloud and production infrastructure, identify gaps, and track remediation in priority order. - Strengthen cloud identity and access, secrets handling, environment separation, and network boundaries. - Protect the infrastructure supporting customer-deployed voice agents, including tenant isolation, third-party provider credentials, and media and recording storage. - Add secure defaults and guardrails to infrastructure as code so teams can follow safer practices in their regular workflows. - Work with compliance partners to connect infrastructure controls to PCI-DSS and ISO 27001, and automate supporting evidence. - Explain technical risks in business terms and coordinate practical fixes with engineering.
Requirements
- At least five years in security engineering, infrastructure engineering, or SRE, with substantial infrastructure security work. - Hands-on experience securing a major cloud platform such as AWS, GCP, or Azure, and container workloads including Kubernetes. - Experience owning infrastructure security for a production platform. - Proficiency with infrastructure as code such as Terraform, plus scripting and automation in Go, Python, or a similar language. - Sound risk judgment: able to explain the likely impact of a finding and how quickly it should be addressed. - Clear communication and the ability to work effectively in an evolving environment.
Nice to have
- Experience with real-time media, networking, or WebRTC. - Background in AI security, including LLM applications or agent infrastructure. - Incident response, application security, or audit support experience, including PCI-DSS, ISO 27001, SOC 2, or HIPAA.
Benefits and work setup
The role offers a salary and equity package, health, dental, and vision coverage, flexible vacation, and the opportunity to contribute to open-source projects.