6mo ago

Infrastructure Security Engineer

EngineeringSecurityOtherDevOps & InfrastructureSecurity EngineerInfrastructure EngineerInfrastructure Security EngineerInfrastructure & Cloud

5 views0 saves0 applied

Apply Now

Quick Summary

Overview

Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency.

Key Responsibilities

Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments. Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them.

Requirements Summary

Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.

Technical Tools

awscirclecigcpgithub-actionspythonsplunkterraformci-cd

Responsibilities

~2 min read

→Design, implement, and automate security controls across GCP and our wider infrastructure, focusing on least-privilege access and leveraging Terraform, policy-as-code, and CI/CD pipelines to prevent misconfigurations, detect configuration drift, and continuously enforce security baselines.
→Partner closely with SRE teams to establish cloud-native deployment workflows, enforcing explicit CI/CD gates, approval flows, artifact provenance, and build security.
→Partner with SRE to harden and manage the security posture of global networking infrastructure, corporate VPN, and perimeter tooling (e.g., Cloudflare) to prevent unauthorized exposure.
→Design and deploy internal tooling to support the SOC and Security Engineering teams.
→Conduct threat modeling, design reviews, and architectural assessments for new and existing systems.
→Maintain internal security documentation, standard operating procedures, and developer best-practice guidance.
→Provide specialized infrastructure, cloud, automation, and CI/CD support during incident response operations and threat investigations.

→4+ years of experience in Security Engineering, Platform Security or SRE/DevOps, with demonstrated ownership of security controls in production environments.
→Ability to assess infrastructure security risks, conduct threat modeling and security design reviews, and translate findings into practical, scalable engineering controls.
→Hands-on experience implementing security controls and automation in cloud environments (GCP preferred).
→Experience designing secure CI systems and workflows, dealing with artifact provenance, approval flows, and code protection (GitHub Actions preferred).
→Solid understanding of network-level security protocol concepts and mitigations (TLS, HTTPS, network segmentation).
→Proficiency in Infrastructure as Code (Terraform) and modern scripting/automation languages (Python, Bash, or Go).
→Strong analytical and problem-solving skills, with a bias toward automation over manual workflows and clear cross-team communication.
→Familiarity with perimeter and monitoring tooling (e.g., Cloudflare/WAF, SIEM, Wazuh/HIDS, EDR, and incident-management platforms).

Nice to Have

~1 min read

Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.
Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components.
Experience securing consumer-facing web and iOS/Android applications.
Experience designing secrets policies and administering Vault or other HashiCorp products.
Proven track record of managing security vendor relationships and technical deliverables.
Hands-on experience administering secrets management platforms (e.g., HashiCorp Vault), including secret rotation and lifecycle automation.