Senior Infrastructure Security Software Engineer (Remote)

Stack

Responsibilities

• ▹Build robust protections around Quora's products, infrastructure and people against both external threats and insider risks
• ▹Identify cloud infrastructure security risks and misconfigurations, and drive remediation processes
• ▹Champion the security-as-code approach: develop and integrate security tools into CI/CD pipelines

Requirements

• ▹Capable software engineer with deep expertise in either cloud infrastructure security or automation and secure development practices
• ▹Hands-on experience securing large-scale cloud environments, particularly AWS
• ▹Experience building secure infrastructure-as-code (IaC) pipelines using Terraform or CloudFormation
• ▹Solid understanding of IAM policies, network segmentation and VPC design
• ▹Experience with monitoring and logging in cloud-native environments
• ▹Skilled at identifying misconfigurations, mitigating risks and driving remediation processes

Nice to have

• ▹Experience implementing security in Kubernetes clusters or serverless architectures
• ▹Experience automating security processes, integrating SAST, DAST and dependency scanning tools into CI/CD pipelines

Soft skills

About the company

Quora's newly created Security Engineering Team exists to keep Quora safe from security problems by building robust protections around its products, infrastructure and people. The small engineering team works on challenging problems every day, in a culture rooted in constant learning and experimentation.