Information Security Engineer - Infrastructure Security

Core Responsibilities

• Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
• Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation.
• Assess security risks in new platforms, products, architectures, vendors, and services, and turn findings into practical recommendations and engineering work.
• Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene.
• Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture and address recurring risks.
• Turn insights from assessments, red team exercises, incident investigations, and operational reviews into durable fixes, such as configuration changes, architectural improvements, policy updates, and automation.
• Build expertise in one or more security domains while contributing across the broader infrastructure security lifecycle.

What We're Looking For

• Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints.
• A broad infrastructure security mindset and curiosity about systems beyond your primary area of expertise.
• Familiarity with common infrastructure attack paths, adversary tactics, techniques, and procedures, and the controls used to prevent, detect, and contain them.
• The ability to assess complex environments and recognize how weaknesses across identity, endpoints, applications, networks, cloud services, or data flows can combine to create risk.
• Experience evaluating security tools and validating that controls are deployed effectively and continue to work as intended.
• Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable.

What We Value

• The ability to own projects, make progress through ambiguity, and balance competing priorities while working well with colleagues.
• Experience in complex, high-assurance, regulated, or rapidly changing environments.
• Comfort moving between strategic problem-solving and hands-on technical work.
• Strong written and verbal communication skills, including the ability to explain technical risks and work with partner teams to drive remediation.
• Contributions to security programs, tooling, automation, incident investigations, or technical research—whether public or internal.

What We Require

• 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field.
• Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains.
• Active TS/SCI security clearance, or eligibility and willingness to obtain one.
• A strong sense of ownership, sound judgment, and integrity.