Staff Infrastructure Security Engineer - San Francisco, CA or Remote (Based in the U.S.)

The Infrastructure Security Engineer will work to ensure the privacy and integrity of our users’ sensitive information. Their objective will be to build core security tooling for platforms that perform the collection, computation, aggregation, and storage of personal financial data and partner with technical teams across the company, advising them on secure design patterns for cloud and corporate infrastructure. They will lead strategic initiatives to remediate and mitigate infrastructure security risk across the organization.

Projects you may be working on in this position include: 

• Design the security controls, automations, and infrastructure to support self-service AWS account creation and administration
• Build tools to perform continuous monitoring, reporting, and remediation of cloud security issues
• Design pragmatic baseline security controls to support new business units and rapid prototyping
• Perform security design reviews for critical partnerships and new technologies

Where you can make an impact: 

• Develop and deploy security controls and measures to protect cloud-based infrastructure and services. This includes defining what good security looks like for cloud infrastructure and executing on initiatives that get us here. Ensure that security measures align with industry best practices and regulatory requirements.
• Serve as a subject matter expert on cloud security matters, providing guidance and support to other engineering teams leveraging various tech stacks. This involves assisting with the design and implementation of secure network/infrastructure architectures and advising on security best practices.
• Develop and implement automation scripts and workflows to streamline security operations and ensure consistent enforcement of security controls across cloud environments. Leverage Infrastructure as Code (IaC) tools such as Terraform to define and deploy security configurations programmatically.
• Assess the security posture of public cloud environments. This involves reviewing configurations, access controls, identity management, encryption mechanisms, …