Infrastructure & Product Security Engineer

Takumi Security; United States; Remote; USD 170,000 - 290,000; Full time

Benefits offered by this job

Remote work

Vacation 4 weeks

Parental leave 14 weeks

Medical coverage

Dental and vision coverage

Life insurance

401K plan

Wellness stipend

Cell phone stipend

Internet stipend

Commuter benefits (SF bay area)

Job summary

Takumi Security is seeking a Security Engineer to harden a Kubernetes-based platform and cloud infrastructure. The role focuses on designing and delivering security tooling, detecting threats, and collaborating with product engineering to raise the security baseline.

Ideal candidates have extensive experience across application and cloud security, with a hands-on mindset for implementing durable controls and scalable security practices in fast-growing tech environments.

Qualifications

• 6+ years of professional experience in software engineering, security engineering, or a mix of both.
• Practical experience across application security and infrastructure or cloud security.
• Strong fundamentals in authentication, authorization, isolation, and secure system design.
• Ability to operate independently and own security problems from discovery to resolution.
• Excellent communication and collaboration with engineers on security trade-offs.

Responsibilities

• Build security tooling and infrastructure to enable secure access to resources.
• Secure cloud and Kubernetes infrastructure across workloads and control planes.
• Improve security of applications and platform by reviewing architecture, code, and APIs.
• Develop automated checks and monitoring to surface high-signal security issues.
• Lead vulnerability assessment and remediation with engineering teams.
• Partner with engineers to implement secure architecture and best practices.
• Strengthen identity and access controls across internal and customer-facing services.
• Respond to security incidents with coordinated remediation and learnings.
• Influence product security by integrating security capabilities with product roadmap.
• Inform security strategy by communicating risks and investment trade-offs to stakeholders.

Skills

Security engineering

Cloud security

Security architecture

Vulnerability remediation

Threat modeling

Communication

Tools

Go

TypeScript

Kubernetes

PostgreSQL

Terraform

Temporal

Job description

Company Description

Takumi Security is a specialized security consultancy whose team has worked with organizations ranging from early-stage startups to well-known global technology brands. The company has experience across diverse industries, including online dating, entertainment, social networking, major tech platforms, and financial institutions. Takumi Security provides services such as fractional CISO and strategic advisory, security program bootstrapping, and assistance with PCI, SOX, and SOC 2 compliance. The team also delivers security engineering, bug bounty program management, and security staff augmentation to help clients scale their security capabilities effectively.

This remote role is with one of our amazing clients whose HQ is in the heart of San Francisco.

Role Description

Our client is looking for a Security Engineer who combines strong infrastructure and application security skills. You'll help secure a cloud platform built on substantial Kubernetes infrastructure, working across the systems that power the platform and the applications, APIs, and services that expose it to customers.

This is a hands‑on engineering role. You'll build security tooling, design and implement preventative controls, develop high‑signal detection capabilities, and partner with engineering teams to identify and address security risks. You'll have the opportunity to shape how security evolves as the platform and company scale.

We're particularly interested in engineers who have worked at rapidly growing technology companies and understand how to build effective security practices in environments where infrastructure, products, and engineering teams evolve quickly.

In this role you will:

• Build security tooling and infrastructure. Design and implement internal tools, authentication services, proxies, and other mechanisms that enable secure, efficient access to infrastructure and sensitive resources.
• Secure cloud and Kubernetes infrastructure. Identify and address risks across cloud workloads, containerized environments, control planes, service-to-service communication, and the underlying systems that operate the platform.
• Improve application and platform security. Review architecture, code, APIs, and sensitive execution paths to identify vulnerabilities and implement practical, durable security improvements.
• Build detection and prevention capabilities. Develop automated checks, monitoring, and detection systems that surface high‑signal security issues while minimizing noise and unnecessary operational overhead.
• Lead vulnerability assessment and remediation. Analyze findings from threat modeling, penetration testing, security scanning, and vulnerability disclosures; assess their real‑world impact and work with engineers to prioritize and resolve them.
• Partner with engineering teams. Collaborate on secure architecture and design, provide actionable guidance on security best practices, and help engineers incorporate security into their development workflows.
• Strengthen identity and access controls. Ensure that authentication, authorization, isolation, and auditability are appropriately implemented across internal systems, infrastructure, and customer‑facing services.
• Respond to security incidents. Investigate security issues, coordinate technical response, drive remediation, and translate lessons learned into lasting improvements.
• Influence product security. Work with product engineering to design and implement security capabilities that meet customer needs without compromising usability or platform performance.
• Inform security strategy. Engage with customers on security and compliance requirements, communicate risks and trade‑offs to technical and non‑technical stakeholders, and help prioritize investments in the company's security posture.

Qualifications

• Current US or Canadian work authorization (visa transfers supported, but not new visa sponsorship)
• 6+ years of professional experience in software engineering, security engineering, or a combination of both.
• Strong engineering fundamentals and experience designing, building, and maintaining secure production systems, tools, or APIs.
• Practical experience across application security and infrastructure or cloud security, with the ability to investigate issues spanning both layers.
• Experience assessing vulnerabilities, understanding exploitability and real‑world impact, and driving issues through remediation.
• A strong understanding of security fundamentals, including authentication, authorization, least privilege, isolation boundaries, and secure system design.
• The ability to operate independently, exercise sound technical judgment, and take ownership of security problems from discovery through resolution.
• Strong communication and collaboration skills, with the ability to work constructively with engineers and explain security trade‑offs to a broader audience.
• A pragmatic approach to security: you know how to reduce meaningful risk while preserving engineering velocity and keeping operational overhead low.

Nice‑to‑haves

• Experience securing cloud platforms, Kubernetes clusters, containerized workloads, distributed systems, or multi‑tenant infrastructure.
• Experience at a rapidly scaling technology company, particularly one building developer infrastructure, cloud services, or a SaaS platform.
• Experience with Go, TypeScript, Kubernetes, PostgreSQL, Terraform, or Temporal.
• Experience building detection engineering capabilities, operating a SIEM, or developing security automation and monitoring pipelines.
• Experience with incident response, security investigations, penetration testing, exploit development, or vulnerability research.
• Experience conducting threat modeling, reviewing system architecture, and assessing security risks across complex services.
• Familiarity with SOC 2, ISO 27001, HIPAA, PCI DSS, or other security and compliance frameworks.
• Contributions to the security community through original research, responsible vulnerability disclosure, open‑source projects, technical writing, or presentations.
• $170,000-$290,000 USD base salary + equity
• Fully remote work (some in‑person company get‑togethers)
• 4 weeks of paid vacation
• 14 weeks of fully paid parental leave for all parents
• Long‑term disability, life insurance, and 401K plans.
• 100% employer‑paid medical coverage and 99% employer‑paid dental and vision coverage for you and a dependent.
• FSAs and HSAs are available as well.
• Monthly lifestyle stipend for wellness, mental health and. therapy, hobbies, etc.
• Monthly cell phone and internet subsidy.
• Commuter benefits for local (San Francisco bay area) employees, and home office stipends for remote employees.
• Continuous learning benefits & related support.