Senior Infrastructure Security Engineer

Job summary

The role involves conducting security design reviews and risk assessments for production environments. The engineer will utilize threat modeling and AI to enhance the identification and mitigation of cybersecurity threats, support infrastructure security projects, and develop security standards and policies.

Qualifications

• Extensive knowledge of cloud computing platforms such as GCP, AWS, and Azure, with experience in architectural reviews and microservices technologies including Containers and Kubernetes.
• Proficiency in automation tools such as Bash, Python, Terraform, and Ansible.
• Familiarity with security features and controls including Authentication, Authorization, PKI, Session Management, and Logging.
• Strong understanding of network security fundamentals, including the TCP/IP stack and various operating systems (Linux, Mac, Windows).
• Experience with NIST framework, PCI-DSS, and SOC2 is preferred.
• Ability to assess and promote the secure adoption of AI-powered engineering tools while maintaining security posture.
• Knowledge of securing AI/ML infrastructure and awareness of emerging AI-specific risks.

Responsibilities

• Conduct security design reviews and risk assessments for production instances.
• Implement threat modeling and AI capabilities to identify and prioritize long-term cybersecurity threats.
• Support infrastructure security projects and perform information security assessments.
• Develop and maintain security standards and policies for systems.
• Ensure secure system configurations are deployed and maintained according to best practices.

Skills

• Expertise in cloud environments and microservices.
• Automation and scripting proficiency.
• Strong network security knowledge.
• Familiarity with security frameworks and AI/ML infrastructure security.

Education

• Relevant degree or equivalent experience in cybersecurity or a related field.

Tools

• Cloud platforms (GCP, AWS, Azure), automation tools (Bash, Python, Terraform, Ansible), security frameworks (NIST, PCI-DSS, SOC2).