Description
Job Title: Staff Security Engineer
Job description: We are seeking an Infrastructure Security Engineer to partner with SRE and infrastructure teams to embed security into our infrastructure deployment and operations. This role will be responsible for creating and validating secure configuration and deployment templates, building audit and detection automation, and ensuring our infrastructure is protected against evolving threats. The ideal candidate combines deep technical expertise in infrastructure technologies with security automation skills and a team-oriented approach to working with engineering teams.
Key Responsibilities
SRE & Infrastructure Team Collaboration
Partner with SRE and infrastructure teams to integrate security into infrastructure workflows, deployment pipelines, and operational practices
Create and validate secure configuration templates for Terraform, CloudFormation, Ansible, and other infrastructure automation tools
Develop deployment templates that embed security controls by default for common infrastructure patterns (VPCs, security groups,



IAM roles, compute instances)
Review and approve infrastructure code providing security guidance and validation before production deployment
Conduct security assessments of infrastructure designs and deployment patterns in collaboration with SRE teams
Establish security guardrails that enable infrastructure teams to move quickly while maintaining security standards

Audit & Detection Automation
Build automated audit systems to continuously validate infrastructure configurations against security baselines and compliance requirements
Develop detection automation for identifying security misconfigurations, policy violations, and anomalous infrastructure changes
Implement policy-as-code frameworks using Open Policy Agent (OPA), AWS Config Rules, Azure Policy, or Sentinel to enforce security standards
Create automated remediation workflows for common security violations and config

📌 Staff Security Engineer Bengaluru
🏢 Pearson
📍 Bengaluru