Information Security Engineer - Infrastructure Security

Design, implement, and improve defensive security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows

Own or contribute to security posture improvements, including hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation

Evaluate security risks in new platforms, products, architectures, vendors, and services, and translate findings into practical recommendations and engineering work

Build and maintain automation for security operations, such as configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene

Partner closely with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to improve security architecture and reduce recurring risk

Translate findings from assessments, red team exercises, incident investigations, and operational reviews into durable fixes—including configuration changes, architectural improvements, policy updates, and automation

Develop expertise in one or more security domains while remaining effective across the broader infrastructure security lifecycle

Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints

A broad infrastructure security mindset and curiosity about systems outside your primary area of expertise

Understanding of common infrastructure attack paths, adversary tactics, techniques, and procedures, and the security controls used to prevent, detect, and contain them

Ability to assess complex environments and identify how weaknesses in identity, endpoints, applications, networks, cloud services, or data flows can combine to create security risk

Experience evaluating security tooling and validating that controls are deployed effectively and continue to work as intended

Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable

Ability to independently own projects, make progress through ambiguity, and balance competing priorities while collaborating effectively with colleagues

Experience working in complex, high-assurance, regulated, or rapidly changing environments

The ability to move between strategic problem-solving and hands-on technical work

Strong written and verbal communication skills, including the ability to explain technical security risks and drive remediation with partner teams

Contributions to security programs, tooling, automation, incident investigations, or technical research—whether public or internal

5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field

Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains

Active TS/SCI security clearance, or eligibility and willingness to obtain one

A strong sense of ownership, sound judgment, and integrity