Security Engineer, Infrastructure Security
Tasks
- Build secure by default infrastructure
- Conduct infrastructure vulnerability management
- Design and implement infrastructure security program
- Enforce network segmentation
- Enforce registry and admission controls
- Ensure image provenance and supply chain integrity
- Harden Kubernetes RBAC
- Implement guardrails for multi tenant environment
- Implement least privilege IAM
- Implement network policies
- Implement pod security standards
- Implement policy as code
- Manage CI/CD security controls
- Manage container runtime security
- Manage secrets and key management
- Operate AWS infrastructure security
- Perform runtime sandboxing and isolation
- Remediate security vulnerabilities
- Secure Kubernetes clusters
Perks/Benefits
- N/A
Skills/Tech-stack
AWS | Admission control | CI/CD | Container Runtime | IAM | Image Provenance | Infrastructure Vulnerability | Infrastructure Vulnerability Management | KMS | Kubernetes | Network Segmentation | Network policies | Pod security | Policy-as-Code | RBAC | Runtime Sandboxing | Secrets management | Supply Chain | Supply chain security | Terraform | Vulnerability Management | “as-code”
Education
N/A
Regions
Countries
States
Related jobs
-
Access Lifecycle | Access Management | Access reviews | Active Directory | AnsibleSenior-level Full TimeDes Moines, IA, United States11h ago
-
Senior Security Engineer USD 215K-272KAWS | AWS Config | AWS Firewall | AWS Firewall Manager | AWS IdentityAnnual learning and development stipend | Company lunches and team events | Learning and career development opportunities | Linux laptop | Mental health and wellness supportSenior-level Full TimeOakland, California, United States13h ago
-
AI Security | BCP/DR | Data Protection | Endpoint Security | Enterprise ArchitectureAnnual bonus | Equity compensation | Hybrid work environmentSenior-level Full TimeDetroit, Michigan14h ago
-
Architecture Review | BCP/DR | Data Protection | Endpoint Security | Enterprise ArchitectureAnnual bonus | Benefits | Equity compensation | Hybrid work environmentSenior-level Full TimeSan Francisco, California14h ago
-
BCP/DR | Data Protection | Endpoint Security | Enterprise Architecture | Enterprise PlatformsSenior-level Full TimeDallas, Texas14h ago
-
Staff Security Engineer, Enterprise Security Engineering USD 171K-273KAPI Integration | AWS | AWS GuardDuty | AWS IAM | AWS SecuritySenior-level Full TimeDetroit, Michigan15h ago
-
Staff Security Engineer, Enterprise Security Engineering USD 171K-273KAPI Integration | AWS Security | Access Management | Alerting | Applied cryptographyHybrid work environmentSenior-level Full TimeDallas, Texas15h ago
-
Security Software Engineer, IAM USD 208K-312KAWS IAM | Access Management | Access Review | Access Review Automation | DeprovisioningEvent support | Flexible time off | Inclusive healthcare package | Mentorship | Remote work optionSenior-level Full TimeRemote - United States R15h ago
-
Principal Site Reliability Engineer USD 320K-380KAKS | AWS | Automation | Azure | BashEducation assistance | Employee assistance program | Flexible PTO | Flexible health savings options | Health and wellness supportSenior-level Full TimeLehi, Utah15h ago
-
Security Architect USD 130K-140KAWS | Access Management | Access Security | Architecture Review | By Design401k plan | Dental insurance | Health insurance | Life insurance | Paid time offSenior-level Full TimeMilwaukee, WI, United States16h ago
-
DevSecOps Engineer USD 95K-105KAWS | ArgoCD | Automation | CI/CD | Cloud Security401k program | Flexible spending account | Medical, dental, and vision coverage | Paid time off | Parental leaveMid-level Full TimeCamp Springs, MD R17h ago
-
DevSecOps Engineer USD 95K-105KAWS | Argo CD | Automation | CI/CD | Cloud Security401k program | Flexible spending account | Medical, dental & vision coverage | Paid time off | Parental leaveMid-level Full TimeCamp Springs, MD R17h ago
-
Cyber-Security Operations Analyst III, Product AppSec USD 102K-234KAWS | Alerting | Ansible | Azure | Azure DevOps401k match | AirVet virtual veterinary care | Employee assistance program | Fertility adoption and surrogacy support | Identity protectionSenior-level Full TimeRemote, United States R17h ago
-
Senior Security Engineer, Product AppSec USD 172K-441KAPI Security | AWS | Azure | Azure DevOps | Bash401k matching | Employee assistance program | Fertility adoption surrogacy support | Identity protection | Legal servicesSenior-level Full TimeRemote, United States R17h ago
-
Senior Cyber-Security Operations Analyst, Product AppSec USD 121K-310KAWS | Ansible | Artifact Repositories | Azure | Azure DevOps401k matching | Employee assistance program | Learning and development resources | Medical, dental, and vision coverage | Mental health supportSenior-level Full TimeRemote, United States R17h ago
-
Senior Configuration Engineer, Product AppSec USD 147K-377KAnsible | Artifact management | Artifact signing | Azure Artifacts | Azure DevOpsSenior-level Full TimeRemote, United States R17h ago
-
Security Engineer III, Product AppSec USD 151K-347KAdvanced Security | Application Security | Artifact Repositories | Automation | Azure24 7 virtual veterinary care | 401k matching | Employee assistance program | Fertility adoption and surrogacy support | Learning and development opportunitiesSenior-level Full TimeRemote, United States R17h ago
-
Admission Control Bypass | Admission control | Application Security | Bash | Cloud SecuritySenior-level Full TimeMinneapolis, Minnesota, United States18h ago
-
Software Engineer, Tooling USD 165K-218K800-53 | AWS Secrets | AWS Secrets Manager | Ansible | Artifact signingHealth benefits | Recovery BenefitsMid-level Full TimeFort Collins, Colorado, United States18h ago
-
Senior Software Engineer USD 190K-252KAsynchronous programming | Big Data | C# | C++ | CI/CDEquity compensation | Health insurance | Paid time offSenior-level Full TimeBroomfield, Colorado, United States19h ago
-
Staff Network Security Engineer USD 168K-211KBGP | BGP-LU | Compliance | DDoS Mitigation | DNS SecurityConference reimbursement | Employee assistance program | Flexible time off | LinkedIn Learning | Local Employee MeetupsSenior-level Full TimeSeattle19h ago
-
Staff Network Security Engineer USD 168K-211KBGP | BGP-LU | DDoS Mitigation | DDoS Scrubbing | DNS SecurityConference reimbursement | Employee assistance program | Flexible time off | LinkedIn Learning access | Local Employee MeetupsSenior-level Full TimeDenver R19h ago
-
Staff Network Security Engineer USD 168K-211KBGP | DDoS Mitigation | DNS Security | ELK Stack | FirewallConference reimbursement | Education reimbursement | Employee assistance program | Flexible time off | LinkedIn Learning accessSenior-level Full TimeBoston R19h ago
-
Staff Network Security Engineer USD 168K-211KArista | BGP | BGP-LU | Ciena | CloudflareConference reimbursement | Employee assistance program | Flexible time off | LinkedIn Learning access | Local Employee MeetupsSenior-level Full TimeSan Francisco R19h ago
-
Enterprise Security Engineer USD 174K-244KAPI Automation | Cloudflare | Conditional Access | Configuration as Code | CrowdStrike FalconAutonomy | High-impact work | In person four days per weekSenior-level Full TimeMiami, FL20h ago