Security Software Engineer, Infrastructure Security

What you'll do

• Design and build core security primitives and services for compute, networking, and identity across AWS, Azure, and GCP.
• Build secure-by-default infrastructure using Linux security mechanisms like AppArmor, SELinux, seccomp, and eBPF.
• Develop APIs, automation, and tooling to manage security posture at scale including CSPM and vulnerability management.
• Create monitoring, logging, and alerting pipelines integrated with tools like Grafana, Splunk, and Victoria Metrics.
• Integrate security controls into CI/CD and infrastructure-as-code workflows using Terraform.
• Lead complex projects from initial problem discovery and design through to implementation and long-term ownership.
• Define secure architectures for new infrastructure and services in collaboration with SRE and product teams.

What we're looking for

• At least 5 years of experience in Software Engineering, Site Reliability Engineering, or similar roles with relevant security work.
• Proficiency in at least one programming language including Java, Golang, Rust, Python, or C/C++.
• Experience using infrastructure-as-code tools like Terraform to automate security configurations and processes.
• Deep understanding of Linux and networking concepts, including low-level fundamentals.
• Experience building security features such as runtime monitoring, CSPM, or vulnerability management.
• Experience with cloud providers (AWS, GCP, or Azure) and their respective security best practices.
• Hands-on experience with Kubernetes and its security ecosystem including RBAC, OPA/Gatekeeper, Kyverno, eBPF, Falco, and Tetragon.
• Strong communication skills to explain complex security concepts to both technical and non-technical stakeholders.