Sr. Engineer, Infrastructure Security

Role overview As a Senior Infrastructure Security Engineer, you’ll help protect production environments and sensitive customer data while supporting teams that need to ship quickly. You’ll improve secure infrastructure, strengthen preventative controls, and take ownership of defined security initiatives in a distributed, remote-first setting.

Responsibilities - Find and address infrastructure security gaps, applying secure-by-default practices across data, endpoints, tools, and processes. - Improve infrastructure-as-code configurations, especially Terraform, for security, scalability, and reliability. - Operate security posture and vulnerability tools, triage findings, and coordinate timely patching and mitigation. - Build reusable developer pathways and automated safeguards that support least-privilege access and secure delivery. - Work with platform, engineering, data, and security colleagues on access controls, CI/CD protections, and secure cloud access. - Participate in incident response, helping detect, contain, remediate, and prevent security issues.

Requirements - Hands-on experience securing SaaS environments and supporting compliance frameworks such as SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001. - Familiarity with cloud deployment patterns and risks across virtual machines, Kubernetes, and serverless systems. - Experience with infrastructure-as-code tools such as Terraform or CloudFormation, and cloud platforms such as AWS. - Working knowledge of Kubernetes and at least one of Python, Go, or JavaScript; familiarity with security posture, vulnerability, or lifecycle tools. - Understanding of data governance and protecting information as it moves between systems. - Collaborative communication, sound judgment in incident handling, and the ability to work independently in an asynchronous remote team.

Benefits and work setup The position is remote and open to candidates in North America or Europe. The role involves collaborating across infrastructure, platform, and security teams; the source does not provide specific compensation or benefits details.