Infrastructure Security Engineer

Cybersecurity Jobs; New York (NY); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, vision, and dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Discounts and perks

Job summary

Cybersecurity Jobs in New York, NY (onsite) seeks a Cloud Security Engineer with 3+ years’ experience to design and secure cloud architectures across AWS, GCP and Azure. You’ll implement IaC, IAM hardening, and secure CI/CD pipelines while aligning with PCI, NIST CSF, GDPR and HIPAA.

You’ll work on container security, Kubernetes, and observability with Terraform, CloudFormation, Puppet, Python and Bash to deliver automated security controls and tooling, collaborating with development teams to

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of experience in cloud security, infrastructure security, or related roles.
• Strong understanding of cloud security principles, compliance frameworks, and best practices.
• Proficiency with at least one cloud platform: AWS, GCP, or Azure, plus associated security services.
• Experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and security posture management.
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation.
• Familiarity with containerization technologies and their security implications.
• Knowledge of network security concepts and protocols.
• Scripting experience for automation and tool development, including Python and Bash.
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills.
• Located in the SF Bay Area or willing to relocate.

Responsibilities

• Design and implement secure cloud architectures across multiple platforms.
• Build and secure hybrid cloud and on-premises environments.
• Create and maintain IaC templates with embedded security controls.
• Support regular security assessments and audits for cloud infrastructure and services.
• Implement and manage cloud security tooling such as CSPM, CWPP, and CASB.
• Manage identities and roles across cloud and hybrid environments.
• Monitor and remediate infrastructure to align with regulations and best practices including PCI, NIST CSF, GDPR, and HIPAA.

Skills

Cloud security

IAM

Scripting (Python, Bash)

Kubernetes security

Ownership

Education

Bachelor’s degree

Tools

Terraform

CloudFormation

Puppet

CI/CD tooling

Job description

Build and operate secure cloud and hybrid infrastructure while improving detections and security operations for cloud-native applications.

Responsibilities

• Design and implement secure cloud architectures across multiple platforms such as AWS, GCP, and Azure
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Create and maintain Infrastructure as Code (IaC) templates with embedded security controls
• Support regular security assessments and audits for cloud infrastructure and services
• Implement and manage cloud security tooling such as CSPM, CWPP, and CASB
• Manage identities and roles across cloud and hybrid environments
• Monitor and remediate infrastructure to align with regulations and best practices including PCI, NIST CSF, GDPR, and HIPAA
• Design and implement secure container standards and automation to enable developer workflows
• Maintain Kubernetes security aligned with current best practices
• Collaborate with development teams to integrate security into CI/CD pipelines
• Secure and enhance CI/CD pipelines, including integration and maintenance of code scanning platforms
• Monitor, investigate, and respond to security events and incidents in cloud and hybrid environments
• Maintain SIEM data pipelines to support reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management such as Puppet
• Develop dashboards and alerts driven by security metrics
• Define and maintain cloud security policies, standards, and procedures
• Drive security projects end to end from issue identification through solution implementation
• Stay current on emerging cloud security threats and mitigation strategies

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 3–5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency with at least one cloud platform: AWS, GCP, or Azure, plus associated security services
• Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and security posture management
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Scripting experience for automation and tool development, including Python and Bash
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate

Technologies

• AWS, GCP, Azure
• Infrastructure as Code (IaC)
• CSPM, CWPP, CASB
• PCI, NIST CSF, GDPR, HIPAA
• Kubernetes
• CI/CD
• SIEM
• Python, Terraform, Puppet, CloudFormation, Bash
• IAM
• Prometheus, Grafana, CloudWatch, Wazuh
• GitHub Actions
• GitHub

Preferred skills and experience

• Relevant security certifications (e.g., CCSP, CSSK, AWS Security Specialty)
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
• Strong proficiency with Python, Terraform, and configuration management such as Puppet
• Hands-on experience building GitHub Actions and workflows
• Experience in observability and security operations tooling, including Prometheus, Grafana, CloudWatch, and SIEM platforms such as Wazuh
• Experience building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience securing AI/ML workloads in cloud environments
• Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms

Benefits

• Equity
• Comprehensive medical, vision, and dental coverage
• Access to a 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Various other discounts and perks

Compensation

• $100,000 - $258,000 USD base salary
• Total rewards include equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, and various other discounts and perks

Location: New York, NY (onsite)

Experience level: 3+ years