The role
As a core member of our infrastructure team, you will build and maintain major core platform features, through inception, design, implementation and launch, working closely with product and engineering disciplines across the company. You will spend the majority of your time on cross-functional self-contained feature teams focused on delivering value to the customer, while other projects will be more internally focused on integrations, scalability, and performance
Responsibilities
- Own the infrastructure security roadmap prioritized according to technical and product requirements
- Lead individual as well as cross-functional efforts to deliver on the roadmap milestones
- Participate in and lead compliance audits
- Educate the platform software engineering team on security best practices and collaborate to evolve the software engineering process to accommodate security principles
- Support, from the security perspective, the broader infrastructure team that owns the site reliability process and systems from design and implementation to deployment and maintenance
- Provide service outage and security breach escalation response alongside infrastructure and software engineers
- Build security-focused services and infrastructure across the entire engineering organization
- Help build an adaptable, high-velocity team
Requirements
- Background in security-focused roles and site reliability engineering in a multi-datacenter production cloud environment with demanding up-time, real-time performance, and cloud network security requirements
- Security-by-design mindset
- Experience establishing and maintaining security processes such as threat modeling, threat detection, risk management, static and dynamic code analysis, continuous audits, et. al
- Experience adopting and employing open-source, home-grown, and commercial technology products as appropriate in support of the Security Infrastructure Engineering mission
- Familiarity with AWS and Kubernetes
- Experience with leading teams and projects
- Comfort working with senior management to allocate and prioritize engineering energy in support of the Security Infrastructure Engineering mission in a real-world resource-constrained environment
Nice to have
- Experience with implementing security policies and achieving SOC 2 certification
- Experience with container and network security, primarily in the context of a Kubernetes cluster
- Experience with VPNs, BeyondCorp, and other internal network access mechanisms
- Experience with IDS, network security monitoring, and container security monitoring tools
- Experience with cloud infrastructure and networking in a production context
- Experience with HashiCorp tools (Vault, and Terraform)
- Experience with Kafka, Redis, and Postgres
- Experience with cloud providers beyond AWS (Azure, GCP, etc.)
Tags & focus areas
Used for matching and alerts on DevFound Remote Dev Security Senior