Infrastructure Security Engineer

X; Greater London; On-site; GBP 58,000 - 98,000; Full time

Benefits offered by this job

Equity

Medical coverage

Vision coverage

Dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Employee discounts

Job summary

SpaceXAI is seeking an Infrastructure Security Engineer to design and secure cloud architectures across AWS, GCP, and Azure, including hybrid on‑prem environments. You’ll build IaC templates with embedded security controls and work with development teams.

The role emphasizes Kubernetes security, CI/CD integration, incident response, and regulatory compliance (GDPR, NIST CSF, HIPAA). Proficiency with Python, Terraform, Puppet, and observability tools is valued; SF Bay relocation is supported.

Qualifications

• Bachelor's degree in CS or cybersecurity or related field.
• 3–5 years of experience in cloud or infrastructure security.
• Strong understanding of cloud security principles and compliance.
• Proficiency in at least one cloud platform (AWS, GCP, Azure).
• Experience securing hybrid/multi-cloud environments with IAM and security posture.
• IaC tooling like Terraform or CloudFormation.
• Familiar with container security and Kubernetes.
• Knowledge of network security concepts and protocols.
• Scripting skills in Python or Bash for automation.
• Proactive, ownership mindset with problem-solving abilities.
• Location willingness to relocate to SF Bay Area or similar markets.
• Security certifications like CCSP, AWS Security Specialty are a plus.

Responsibilities

• Design and secure cloud architectures across AWS, GCP, and Azure.
• Build and secure mission-critical apps in hybrid cloud/on‑prem environments.
• Develop and maintain secure IaC templates with embedded controls.
• Assist with security assessments and audits of cloud infra.
• Implement and manage CSPM, CWPP, CASB tools.
• Manage identities and roles across cloud and hybrid environments.
• Monitor and remediate to comply with PCI, GDPR, NIST CSF, HIPAA.
• Design secure container standards and developer-friendly automation.
• Maintain Kubernetes security aligned with best practices.
• Collaborate with devs to integrate security into CI/CD pipelines.
• Secure and enhance CI/CD pipelines; maintain code scanning platforms.
• Monitor security events and incidents in cloud/hybrid environments.
• Maintain SIEM data pipelines for reliable alerting.
• Develop security dashboards and alerting using Python, Terraform, Puppet.
• Develop and enforce cloud security policies and standards.
• Own security projects end to end and stay ahead of threats.

Skills

Cloud security

Multi-cloud security

IaC security

Kubernetes security

CI/CD security

Regulatory compliance

Scripting (Python/Bash)

IAM security

Observability tools

Open-source contributions

AI for cloud security

Education

Bachelor's degree in Computer Science or related

Tools

Terraform

CloudFormation

Kubernetes

Puppet

GitHub Actions

Wazuh

Job description

Salary: £58,000 - 98,000 per year

Requirements

• Bachelors degree in Computer Science, Cybersecurity, or a related field
• 3–5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency in at least one cloud platform (AWS, GCP, or Azure) and associated security services
• Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security posture
• Experience with Infrastructure as Code tools (e.g., Terraform, CloudFormation)
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Experience with scripting languages (e.g., Python, Bash) for automation and tool development
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate
• Relevant security certifications (e.g., CCSP, CSSK, AWS Security Specialty)
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)
• Strong proficiency with Python, Terraform, and configuration management (e.g., Puppet)
• Hands-on experience building GitHub Actions and workflows
• Experience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)
• Experience in building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience with securing AI/ML workloads in cloud environments
• Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms

Responsibilities

• Design and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP, Azure)
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls
• Assist with regular security assessments and audits of cloud infrastructure and services
• Implement and manage cloud security tools and services (e.g., CSPM, CWPP, CASB)
• Manage identities and roles effectively across cloud and hybrid environments
• Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)
• Design and implement secure container standards and automation that enable frictionless developer workflows
• Maintain Kubernetes security aligned with current best practices
• Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines
• Secure and enhance CI/CD pipelines; integrate and maintain code scanning platforms
• Monitor and respond to security events and incidents in cloud and hybrid environments
• Maintain SIEM data pipelines needed for reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (e.g., Puppet)
• Develop dashboards and alerts from security metrics
• Develop and maintain cloud security policies, standards, and procedures
• Own security projects end to end: identify issues and implement solutions
• Stay current with emerging cloud security threats and mitigation strategies

Technologies

• AI
• AWS
• Azure
• Bash
• CI/CD
• Cloud
• CloudWatch
• Embedded
• GCP
• GitHub
• Grafana
• IAM
• Karma
• Kubernetes
• Network
• Prometheus
• Puppet
• Python
• Security
• Terraform

More

We are SpaceXAI, and our mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence, with a flat organizational structure where employees are expected to be hands-on and contribute directly to our mission. We value curiosity, initiative, strong work ethic, prioritization, and clear communication. We are seeking an Infrastructure Security Engineer to join our security team and help secure critical infrastructure across multi-cloud and hybrid environments for platforms such as SpaceXAI, X Social, X Money, and related systems. We offer a total rewards package that includes equity, comprehensive medical, vision, and dental coverage, a 401(k) retirement plan, short- and long-term disability insurance, life insurance, and various discounts and perks. The role is based in the SF Bay Area or open to relocation, with compensation of $100,000 - $258,000 USD.