Description
Job Title: Staff Security Engineer
Job description: We are seeking an Infrastructure Security Engineer to partner with SRE and infrastructure teams to embed security into our infrastructure deployment and operations. This role will be responsible for creating and validating secure configuration and deployment templates, building audit and detection automation, and ensuring our infrastructure is protected against evolving threats. The ideal candidate combines deep technical expertise in infrastructure technologies with security automation skills and a team-oriented approach to working with engineering teams.
Key Responsibilities
SRE & Infrastructure Team Collaboration
- Partner with SRE and infrastructure teams to integrate security into infrastructure workflows, deployment pipelines, and operational practices
- Create and validate secure configuration templates for Terraform, CloudFormation, Ansible, and other infrastructure automation tools
- Develop deployment templates that embed security controls by default for common infrastructure patterns (VPCs, security groups,
IAM roles, compute instances)
- Review and approve infrastructure code providing security guidance and validation before production deployment
- Conduct security assessments of infrastructure designs and deployment patterns in collaboration with SRE teams
- Establish security guardrails that enable infrastructure teams to move quickly while maintaining security standards
Audit & Detection Automation
- Build automated audit systems to continuously validate infrastructure configurations against security baselines and compliance requirements
- Develop detection automation for identifying security misconfigurations, policy violations, and anomalous infrastructure changes
- Implement policy-as-code frameworks using Open Policy Agent (OPA), AWS Config Rules, Azure Policy, or Sentinel to enforce security standards
- Create automated remediation workflows for common security violations and config