Lead Engineer, Infrastructure Security

Job Summary

About the role

The Lead Security Infrastructure Engineer will serve as the dedicated, named liaison to GCS - including Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud teams.

Responsibilities

• Serve as the dedicated, named liaison to GCS - including Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud teams - consuming security findings, audit results, and risk-prioritized remediation requirements defined by GCS.
• Maintain a continuous, standing engagement cadence with GCS leadership to ensure Infrastructure's Cloud Engineering (Core/On-Prem and Cloud) and Networking teams are aligned to current GCS priorities, SLAs, and control objectives.
• Translate GCS inputs into Agile-ready Jira work (stories, tasks, acceptance criteria) aligned to Infrastructure sprint planning.
• Execute hands-on remediation for high-risk or complex findings across Azure, hybrid/on-prem, network, and endpoint environments.
• Provide direct production change execution for security remediations, following change controls and minimizing business impact.
• Guide and mentor Infrastructure engineers on secure configuration, remediation techniques, and security best practices.
• Lead remediation efforts across Platform Engineering, Network & Edge, and Client Services.

Qualifications

• Must have 8+ years of experience in CS, engineering, or related field.
• Relevant certifications: CISSP, CISM, CISA, or GIAC / SANS (e.g. GCED, GPEN, GCIH).
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Ability to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.
• Expert-level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.

Skills

• Able to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.
• Strong experience converting non-Agile security inputs into sprint-ready work items.
• Expert-level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.
• Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.
• Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.
• Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.
• Comfortable making high-impact production changes safely and responsibly.
• Directs external remediation resources with clear standards and quality control.
• Clear, trusted communicator with Infrastructure leadership and GCS.
• Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.
• Owns the end-to-end finding-to-close process for infrastructure;