Infrastructure Security Engineer

Role overview

This position focuses on protecting critical infrastructure across multi-cloud and hybrid environments for an AI-focused organization pursuing ambitious research goals. The engineer embeds security directly into how systems are built and run, partnering with developers so controls show up in pipelines rather than as retrofits. The scope spans cloud architecture, container security, detection operations, and developer enablement, with an automation-first approach to hardening at scale.

Responsibilities

- Design secure cloud architectures across multiple platforms (AWS, GCP, Azure) and author Infrastructure as Code templates with embedded controls - Operate cloud security tooling categories such as CSPM, CWPP, and CASB, and govern identity and access across hybrid environments - Define secure container standards, maintain cluster hardening, and integrate scanning into CI/CD pipelines alongside engineering teams - Monitor and respond to security events in cloud and hybrid environments, maintain SIEM data pipelines, and build operations infrastructure using Python, Terraform, and configuration management - Run assessments and align infrastructure with regulatory frameworks including PCI, NIST CSF, GDPR, and HIPAA - Build security metrics dashboards and alerts, author cloud security policies and standards, and drive projects end to end from problem definition through remediation

Requirements

- Bachelor's degree in Computer Science, Cybersecurity, or a related field - 3–5 years of experience in cloud security, infrastructure security, or related roles - Proficiency in at least one cloud platform (AWS, GCP, or Azure) and its associated security services - Hands-on experience securing hybrid cloud/on-premises or multi-cloud environments, including identity and access management - Experience with Infrastructure as Code tools such as Terraform or CloudFormation and with scripting languages such as Python or Bash for automation - Located in the San Francisco Bay Area or willing to relocate; proactive mindset with strong ownership and problem-solving skills

Nice to have

- Relevant security certifications such as CCSP, CSSK, or AWS Security Specialty - Deep expertise in Kubernetes and container security, including multi-cloud and cloud-to-cloud scenarios - Strong proficiency with Python, Terraform, and configuration management tools such as Puppet - Hands-on experience building GitHub Actions and workflows - Familiarity with observability and security operations tooling (Prometheus, Grafana, CloudWatch, or SIEM platforms such as Wazuh) - Experience building custom cloud security tools or integrations, contributing to open-source security projects, or leveraging AI for security monitoring - Background securing AI/ML workloads in cloud environments - Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms

Benefits and work setup

Base salary range of $100,000 to $258,000 USD, plus equity as part of a total rewards package. Coverage includes comprehensive medical, vision, and dental insurance, access to a 401(k) retirement plan, short- and long-term disability insurance, and life insurance, along with various additional discounts and perks.