Junior Software Engineer (Security) - InfraSec (Remote - United Kingdom)

奥汰; London; Remote; GBP 50,000 - 85,000; Full time

Job summary

Yelp is seeking an Infrastructure Security Engineer to improve cloud security and vital corporate infrastructures. This role involves creating automated solutions, coordinating security policies, and participating in proactive security measures in a diverse and collaborative computing environment. We welcome applicants who share our passion for security and teamwork, regardless of whether they meet every requirement.

Benefits

Competitive salary

Pension scheme

Flexible working hours

25 days paid holiday

Health insurance

Hackathons

Quarterly team offsites

Qualifications

• Some experience developing complex, distributed applications.
• Understanding of designing well-structured APIs.
• Proficiency in at least one language (Python, Java, JavaScript, C).

Responsibilities

• Implement and automate security policies and enforcement.
• Enhance vulnerability detection and response capabilities.
• Work with teams to identify and remediate vulnerabilities.

Skills

Collaboration

Problem-Solving

Knowledge Sharing

Education

Experience in Software Engineering

Tools

Linux

Docker

Kubernetes

Job description

Summary

Yelp engineering culture is driven by our values: we’re a cooperative team that values individual authenticity and encourages creative solutions to problems. All new engineers deploy working code their first week, and we strive to broaden individual impact with support from managers, mentors, and teams. At the end of the day, we’re all about helping our users, growing as engineers, and having fun in a collaborative environment.

The Infrastructure Security (InfraSec) team at Yelp ensures the security of yelp.com and related properties. InfraSec is responsible for AWS cloud security with a focus on least privilege, containers and developer efficiency, building and enabling data security to support privacy initiatives and system level access controls, such as Linux, Docker and Kubernetes authorization. We develop and support company-wide standards for vulnerability management, authorization, authentication and data privacy, including implementations of these standards and monitoring and correcting insecure usage.

We’re looking for an Infrastructure Security (InfraSec) Engineer to join Yelp’s globally expanding Security team and help keep our cloud and corporate infrastructure, network, endpoints and applications safe.

In this role, you’ll work on improving our cloud and corporate security posture and capabilities. Together with the rest of our awesome security engineers, you’ll build custom solutions at scale with creativity and automation. You’ll also partner with our corporate infrastructure and IT teams to help architect the future of Yelp’s authentication, identity management, and network security systems.

This opportunity requires you to be located in the United Kingdom. We’d love to have you apply, even if you don’t feel you meet every single requirement in this posting. At Yelp, we’re looking for great people, not just those who simply check off all the boxes.

What you'll do:

• Build and scope tools and infrastructure for automating security policy and enforcement.
• Improve and enhance vulnerability detection and response capabilities.
• Identify vulnerabilities through assessments, working with internal partners towards remediation and improvement of Yelp’s corporate environment and infrastructure.
• Help define policies and security best practices for IT, infrastructure, and other internal organization and third-party integrations.
• Review and offer feedback on security implications of software system designs submitted from across Yelp Engineering.
• Exhibit the strong communication ability needed to enforce rigorous security standards, while always playing well with others and partnering with diverse stakeholders to advance Yelp’s goals.
• Design, develop, and operationalize monitoring, correlation, and alerting capabilities for Yelp’s corporate network, infrastructure, and applications to identify suspicious or anomalous behavior.
• Participate in a regular on call rotation and occasional incident response.
• Help perform threat modeling across business applications and infrastructure integrations.

What it takes to succeed:

• Some experience in software engineering, developing full-stack, complex, and distributed applications.
• An understanding of designing elegant, well-structured APIs.
• Proficiency in at least one programming language (e.g., Python, Java, JavaScript, C, etc.).
• A collaborative mindset with a proactive approach to problem-solving, continuous learning, and knowledge sharing across teams.

What you'll get:

• Full responsibility for projects from day one, a collaborative team, and a dynamic work environment.
• Competitive salary, a pension scheme, and an optional employee stock purchase plan.
• 25 days paid holiday (rising to 29 with service), plus one floating holiday.
• £150 monthly reimbursement to help cover remote working expenses.
• £81 caregiver reimbursement to support dependent care for families.
• Private health insurance, including dental and vision.
• Flexible working hours and meeting-free Wednesdays.
• Regular 3-day Hackathons, bi-weekly learning groups, and productivity spending to support and encourage your career growth.
• Opportunities to participate in digital events and conferences.
• £81 per month to use toward qualifying wellness expenses.
• Quarterly team offsites.

Closing

Yelp values diversity. We’re proud to be an equal opportunity employer and consider qualified applicants without regard to race, color, religion, sex, national origin, ancestry, age, genetic information, sexual orientation, gender identity, marital or family status, veteran status, medical condition, disability, or any other protected status.

Note: Yelp does not accept agency resumes. Please do not forward resumes to any recruiting alias or employee. Yelp is not responsible for any fees related to unsolicited resumes.

#LI-Remote

Recruiting and Applicant Privacy Notice