Senior Security Engineer - Infrastructure

About the Role

We are seeking a highly skilled and motivated Senior Security Engineer to join our Edge Team. In this role, you will be responsible for securing our cloud and edge computing environments, with a focus on our Galleon mobile data centers and their integration with our Atlas cloud platform. You will play a crucial role in designing, implementing, and managing security controls across our infrastructure, ensuring the confidentiality, integrity, and availability of our systems and data.

Location. This role is office-based at our Bellevue, Washington office. 

What You'll Do (Key Responsibilities)

• Design, implement, and manage security controls across our cloud platforms (AWS, Azure, GCP), Kubernetes environments, and Galleon mobile data centers, ensuring secure deployment practices and platform security for microservices and APIs
• Integrate security components within our CI/CD pipelines, including automated security testing (SAST, DAST, container image scanning), vulnerability scanning, and compliance checks. Ensure that security is embedded throughout the software development lifecycle
• Define and implement security configurations for infrastructure, including Kubernetes, using IaC tools (Terraform, Ansible) to ensure consistent enforcement of security policies
• Monitor and respond to security events, develop and maintain security monitoring tools, and participate in incident response activities
• Architect and implement security solutions that protect our cloud-native, hybrid, and on-premises infrastructure, including our Galleon data centers. Conduct security architecture reviews, threat modeling, and risk assessments to identify and mitigate vulnerabilities
• Partner with engineering teams to integrate security tooling into the SDLC, enabling DevSecOps adoption and fostering a culture of shared security responsibility
• Ensure compliance with relevant security standards and regulations (e.g., SOC 2, ISO 27001) through regular audits and implementing necessary controls. Stay up-to-date with cybersecurity threats, trends, and industry standards

Data Center Security Responsibilities:

• Implement robust perimeter security for Galleon data centers, including physical access controls, intrusion detection systems, and video surveillance
• Design and implement network segmentation within data centers to isolate critical systems and limit the impact of security breaches
• Utilize micro-segmentation techniques to enforce security policies at the workload level, controlling communication between individual applications and services
• Implement data loss prevention (DLP) solutions to prevent sensitive data from leaving the data center environment
• Securely manage and store cryptographic keys used for encryption and authentication within the data center
• Implement robust logging and monitoring systems to track security-related events and detect anomalies
• Regularly conduct vulnerability assessments and penetration testing to identify and remediate security weaknesses
• Develop and maintain incident response plans specific to data center security incident

Required Qualifications:

• 7+ years of experience in security engineering, with a focus on cloud-native technologies, distributed systems, and edge computing, including securing Kubernetes environments
• Strong understanding of security best practices across the SDLC, including secure coding principles, threat modeling, and vulnerability management
• Experience securing cloud platforms (AWS, Azure, GCP) and Kubernetes environments, including implementing RBAC, network policies, and container security
• Proficiency in scripting and automation (Python, Bash, Go) for security tooling and infrastructure-as-code (Terraform, Ansible)
• Experience with security monitoring, threat detection, and incident response in cloud and containerized environments
• Excellent communication and collaboration skills, with the ability to work effectively with engineering teams and advocate for security best practices
• Bachelor's degree in a relevant field or equivalent practical experience

Citizenship Requirements 

For select roles, due to the nature of our clientele and the technologies involved, there may be specific nationality or citizenship indicated in the required qualifications section. These roles may involve access to sensitive information that is subject to export control regulations or other legal restrictions. In such cases, employment offers will be contingent upon your ability to comply with these requirements. 

Compensation

For U.S. Based candidates: To ensure fairness and transparency, the starting base salary range for this role for candidates in the U.S. are listed below, varying based on location experience, skills, and qualifications.

In addition to base salary, this role will also be offered equity and subsidized benefits (details available upon request).

Benefits

• Competitive base salary and equity
• Medical, dental, and vision (subsidized cost)
• Health savings accounts (HSA), flexible spending accounts (FSA), and dependent care FSAs (DCFSA)
• Retirement plan options, including 401(k) and Roth 401(k)
• Unlimited paid time off (PTO)
• 14 paid company holidays per year

#LI-ST1

#LI-Onsite

#665