Brex is building the new global standard for financial services, starting with corporate cards. We are designing the product from first principles, enabling us to have unparalleled features and a seamless, modern experience for our customers. With backing from top venture firms and industry veterans such as Peter Thiel and Max Levchin, Brex is one of the fastest-growing startups to date, and we’re looking for someone to help scale the company with incredible people across the board. Building world-class financial services requires world-class security. As an infrastructure security engineer, you will be bolstering the security of our infrastructure by creating security services and frameworks for secrets management, identity and access management, logging, monitoring, secure sharing, backup, host & container operations, network management, etc . You’d also be doing a lot of automation to detect security vulnerabilities and patch systems. Our team is committed to creating a driven and diverse company with ambitions people from wide-ranging backgrounds.

We’re looking for individuals with a strong background and/ or interest in securing systems and infrastructure at scale, comfortable in dealing with lots of moving pieces, with a keen eye towards detail, and comfortable learning new technologies. You should demonstrate strong communication skills, autonomy, and ability to work with a variety of stakeholders.

Responsibilities:

• Improve security across all aspects of the Infrastructure by tightening and configuring relevant AWS services and features
• Design, deploy, manage and improve critical security infrastructure services and tools for authentication, authorization, identity & access management, PKI, secrets management, VPN, logging, detection, mTLS and more
• Architect and provision secure flags in internal infrastructure provisioning frameworks such that newly provisioned infrastructure has a secure baseline by default
• Automate detection of vulnerabilities, evaluate and deploy critical patches to production systems
• Design, configure and maintain production IDS and IPS systems
• Train new engineers and evangelize good security habits; ensure best practices (in technology via education/outreach)
• Uphold our high engineering standards and bring consistency to the codebases, infrastructure, and processes you will encounter 

What We Value:

• Relevant work experience operating, maintaining and/ or securing large scale production infrastructure
• Experience working with AWS, kubernetes and docker
• Ability to write high quality, maintainable code that solves high-risk security problems 
• Contributions to the security community (open source, public research, blogging, presentations, etc)
• We work in Elixir and Go, however languages can be learned: we care much more about the general engineering skills than knowledge of a particular language or framework
• Caring about system design and valuing building things correctly from day one, without cutting corners
• Debugging complex problems across the entire stack
• Taking pride in working on projects to successful completion, involving a wide variety of technologies and systems
• Holding yourself and others to a high bar when working with production systems
• Stitching many different services and processes together, even if you have not worked with them before
• Thriving in a collaborative environment, filled with a diverse group of people with different expertise and backgrounds (we currently have around 30 nationalities represented, with more than ½ the company working in a country different from the one they grew up in) 

Engineering at Brex:

• We work in an environment where it matters to make the right design decisions the first time, and as a result, take on less technical debt than other companies
• Product is a highly collaborative initiative across multiple teams. Engineers are expected to understand and have product input, designing systems towards our long-term product vision
• We'd rather have one strong, well-compensated engineer, instead of having 5 average engineers. Our customers are fine with fewer features, but are not ok with broken features
• We believe in two equal track career growths between senior individual contributors and managers. We want people to contribute where they feel most impactful
• We believe in small, accountable and autonomous teams of amazing people, eager to learn, teach and constantly improve our way of working
• People have a strong sense of ownership and accountability for what they’re building. What we build today will be the foundation for dozens of other systems in the future
• We are very frank on discussing technical matters. If one disagrees with how things are being done, we encourage them to speak up and help us get to the truth faster