Job Description

We build cloud-native enterprise platforms serving customers across Asia, Europe and Latin America. Our production environment runs on AWS using Kubernetes, Docker and Terraform. As our business grows, security becomes increasingly critical. The Senior Infrastructure Security Engineer will strengthen the security of the cloud platform, engineering environment and corporate systems, working with DevOps and Engineering teams to improve security architecture, respond to incidents, reduce risk and build long-term security capabilities.

Job Requirements

Responsibilities:

• Secure and continuously improve our AWS, Kubernetes, container and Terraform environments.
• Review cloud architecture, identify risks and recommend security improvements.
• Protect corporate systems including Google Workspace, endpoint security, VPN and identity platforms.
• Lead vulnerability management, threat hunting, security investigations and incident response.
• Improve monitoring, detection, logging and security visibility across our platform.
• Integrate security into CI/CD pipelines and engineering workflows.
• Establish security standards, best practices and long-term security roadmaps.
• Support compliance initiatives and help build a strong security culture across the engineering organization.

Qualifications:

• 3+ years of experience in Infrastructure Security, Cloud Security or Cyber Security.
• Hands-on experience securing AWS production environments.
• Strong knowledge of Kubernetes, Docker and Terraform security.
• Experience managing Google Workspace, endpoint security and remote access solutions.
• Experience investigating and responding to real-world security incidents.
• Strong Linux, networking and Identity & Access Management fundamentals.
• Ability to work collaboratively with DevOps and Engineering teams.

Nice to have:

• Experience with GuardDuty, Security Hub, Inspector, Trivy, Falco, Wazuh, Splunk, Microsoft Sentinel, Nessus, Burp Suite or similar platforms.
• Knowledge of ISO 27001, SOC 2, CIS Benchmarks, OWASP Top 10 and modern security frameworks.
• Professional certifications such as CISSP, CISM, AWS Security Specialty, CCSP, Security+, GIAC, OSCP or CEH.

Skills