Infrastructure Security Engineer

Fully Remote Job

About the role

The organization operates in the AI-driven lending marketplace, addressing the complexity and cost barriers in credit access for millions of Americans. It collaborates with banks and credit unions to deliver affordable credit through advanced AI technology that makes smarter, fairer lending decisions. The platform employs extensive data signals to predict borrower risk and supports financial progress. The organization maintains a digital-first work culture with distributed teams across many US and Canadian cities, emphasizing a balance between remote flexibility and in-person collaboration. The Infrastructure Security Engineer role focuses on designing, building, and enhancing security controls that protect the production infrastructure and developer platforms. This position works closely with infrastructure, platform, and product teams to identify security risks, review designs, and automate preventative controls. The role is critical in reducing risk and ensuring secure infrastructure deployment, contributing to safer product delivery. The engineer will independently lead medium-sized projects, troubleshoot security challenges, and implement improvements that enhance the security baseline.

Responsibilities

• Design and implement security controls for cloud, platform, and deployment systems with an emphasis on secure defaults and reducing risk
• Collaborate with platform, SRE, and infrastructure teams to review architectural and infrastructure changes and develop remediation plans
• Develop and improve automation for cloud IAM, Kubernetes, container environments, secrets management, and infrastructure-as-code workflows
• Identify and address systemic infrastructure weaknesses such as misconfigurations and insecure defaults
• Support vulnerability management by prioritizing findings, validating fixes, and enhancing detection and prevention methods
• Assess and improve security for AI-assisted developer workflows and AI-enabled systems interacting with sensitive environments
• Respond to production security incidents, investigate root causes, and implement follow-up improvements
• Document security patterns, participate in design and code reviews, and help raise the overall security quality across engineering teams

Requirements

• Bachelor’s degree with 3+ years experience in security engineering, infrastructure engineering, or related software engineering roles
• Experience securing or operating cloud-native infrastructure, preferably in AWS or similar environments
• Knowledge in at least one of the following areas: cloud IAM, Kubernetes/container security, network security, secrets management, or vulnerability management
• Proficiency in coding or automation using Python, Go, Java, or similar languages
• Experience reviewing system designs, infrastructure changes, or architecture proposals with actionable security outcomes
• Familiarity with infrastructure-as-code and CI/CD tools such as Terraform, Helm, GitHub Actions, or equivalent
• Capability to investigate and resolve moderately complex production or security issues using logs, metrics, and debugging tools
• Understanding of security considerations for responsible use of AI-assisted engineering tools, including data exposure and safe automation