• We are looking for a Senior Infrastructure Security Engineer with a proven track record in keeping systems safe. You will play a critical role in building and providing tooling that monitors our entire stack, from supporting our consumer-facing products and our institutional offerings to ensuring that we are capable of rapidly responding to cyber attacks on our colleagues and endpoints
• Throughout our company, Security is a well-established mindset that leverages novel engineering approaches - as a Senior Infrastructure Security Engineer, you will lead by example and drive technical discussions with engineering teams and influence the overall architecture of our platform
• Our day-to-day work is interesting and dynamic, driven by a focus on proactive threat actor identification and in-depth investigation of security issues. These practices are key to ensuring strong product security and fostering continuous, iterative improvement
• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them
• Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems
• Contribute to internal security documentation, best practices, and developer guidance
• Participate in security incident response when engineering expertise or automation support is needed
• AI-Driven Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure infrastructure

Benefits

• Meaningful Equity
• Offsites
• Get the equipment you need
• Paid Family Leave
• Remote-first
• Crypto Bonus
• Unlimited Vacation
• HealthCare

• Curiosity, ownership, and a drive to continuously improve the security posture of complex systems
• Hands-on experience implementing security controls and automation within cloud environments, GCP or AWS are preferred
• Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows
• Familiarity with maintaining HIDS systems (Wazuh preferred)
• 4+ years of experience in security engineering, platform security, or DevSecOps roles
• Ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions
• Proficiency in modern scripting, automation and infrastructure as code e.g. Python, Bash, Go, Terraform, or similar
• Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse, CircleCI)
• Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them
• Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted components
• Experience securing consumer-facing web and iOS / Android applications
• Experience designing policies and administering Vault & other Hashicorp products
• Experience managing security vendors