Infrastructure Security Engineer

AECOM; New York (NY); On-site; USD 177,000 - 251,000; Full time

Job summary

AECOM is seeking a highly motivated Security Engineer to join the Security Posture Management team. This role focuses on empowering engineers while ensuring high standards of security controls for critical infrastructure. As a Security Engineer, you will address security vulnerabilities and collaborate with cross-functional teams to maintain security best practices while fostering efficient workflows.

Qualifications

• 8+ years of experience securing complex on-prem or cloud deployments.
• Experience with IAC deployments for complex systems.
• Proven communication skills to convey complex technical issues.

Responsibilities

• Architect scalable solutions to complex infrastructure security problems.
• Build out proofs of concept, tools, and platforms.
• Lead engineers in creating solutions and improving security maturity.

Skills

Communication

Infrastructure Security

Threat Modeling

Cloud Security

Infrastructure as Code

Problem Solving

Education

B.S. or M.S. in Computer Science or related field

Tools

Terraform

SaltStack

Ansible

Job description

**Summary:**

The Security Posture Management team’s mission lies at the intersection of empowering engineers to work efficiently with minimal friction and maintaining the highest standards of security controls for our critical infrastructure. We are looking for a highly motivated and experienced Security Engineer to join our team!As a key member of the team, you will play a critical role in ensuring the security of Meta's infrastructure. This is an exciting opportunity if you are passionate about solving complex security problems through innovative engineering solutions.In this role, you will be responsible for scaling the identification of risky infrastructure, insecure patterns, and vulnerabilities that may impact Meta's data and systems in the cloud and on-prem. You will collaborate with other software, platform, and security engineers to design and ensure continuous security in alignment with Meta's own baselines of security best practices. Additionally, you will work closely with business verticals to reduce friction from these security controls while enabling Meta to securely move and iterate quickly.

**Required Skills:**

Infrastructure Security Engineer Responsibilities:

1. Work with teams of security engineers and developers to architect scalable solutions to complex infrastructure security problems

2. Build out proofs of concept, tools, and/or platforms to address security problems at scale

3. Lead other engineers in creating solutions

4. Eliminate classes of security problems by shifting the detection and preventions left into the developer workflow

5. Partner with cross-functional teams to ensure security maturity work is being prioritized and addressed in ways both timely and durable

6. Provide architectural, design, and threat-based guidance to software development teams to improve security maturity before code is created

**Minimum Qualifications:**

Minimum Qualifications:

7. 8+ years of experience securing complex on-prem or cloud deployments

8. 8+ years of experience with IAC (Infrastructure as a Code) deployments for complex systems [Terraform, SaltStack, Ansible]

9. 8+ years of experience coding in Python, PHP, Java, Ruby, Go, Rust, C/C++, or similar languages

10. Experience addressing security problems by building scalable engineering solutions

11. Proven communication skills to convey complex technical issues to both security and non-security audiences

12. Experience in reviewing distributed systems design and conducting threat model assessment of software and services

13. B.S. or M.S. in Computer Science or related field, or equivalent experience

**Preferred Qualifications:**

Preferred Qualifications:

14. Experience influencing software engineers building security products

15. Experience creating metrics to measure service and program effectiveness and consistency

16. Experience making contributions to the security or privacy community (public research, OSS, blogging, presentations, etc.)

**Public Compensation:**

$177,000/year to $251,000/year + bonus + equity + benefits

**Industry:** Internet

**Equal Opportunity:**

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].