Senior Software Engineer - Infrastructure Security (Remote)

Role overview

Help protect two large digital products by strengthening the cloud, compute, and operating system foundations they rely on. This hands-on security engineering role combines architecture reviews, threat modeling, security automation, and incident response, with room to shape controls and improve how engineering teams build and operate systems.

Responsibilities

- Review cloud and compute architecture changes with engineering teams, and develop threat models for shared infrastructure patterns. - Build or adopt tools to monitor and harden cloud infrastructure and operating systems, improve security logging, and detect intrusions. - Advise on security controls and remediation for cloud and container environments, including AWS and Kubernetes. - Define security policies and monitor whether systems and teams follow them. - Write automation for threat detection, incident containment, and network access management. - Triage security incidents, assess their scope and urgency, and contribute to incident response.

Requirements

- Strong software engineering ability and ownership of outcomes, with sound judgment about where detailed investigation and prioritization matter most. - Expertise in at least one relevant area: cloud infrastructure security, automated security practices, or Linux and system security. - For cloud security: hands-on experience securing cloud environments, especially AWS, and familiarity with infrastructure as code, IAM, network segmentation, VPC design, and cloud monitoring and logging. - For security automation: experience integrating security tools such as static or dynamic analysis and dependency scanning into CI/CD workflows, and promoting secure coding practices. - For system security: knowledge of AWS operations and container security concepts such as POSIX capabilities, seccomp, and Linux security modules. - Ability to navigate complex work, communicate technical direction, and collaborate with peers and leadership.

Nice to have

- Experience securing Kubernetes clusters or serverless systems, or familiarity with OSQuery and eBPF. - Product security experience, including secure web and API development and common web vulnerabilities.

Benefits and work setup

- Remote role for eligible candidates in the United States or Canada; availability is needed for coordination during weekday Pacific Time hours. - Benefits vary by country and may include health coverage, equity, remote work reimbursement, paid time off, and employee assistance programs.